Description
D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| DNS-320L | D-Link / DNS-320L | 20240403 | affected |
| dns-320l_firmware | dlink / dns-320l_firmware | 20240403 | affected |
| DNS-325 | D-Link / DNS-325 | 20240403 | affected |
| dns-325_firmware | dlink / dns-325_firmware | 20240403 | affected |
| DNS-327L | D-Link / DNS-327L | 20240403 | affected |
| dns-327l_firmware | dlink / dns-327l_firmware | 20240403 | affected |
| DNS-340L | D-Link / DNS-340L | 20240403 | affected |
| dns-340l_firmware | dlink / dns-340l_firmware | 20240403 | affected |