VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 05:58 UTC

CVE-2024-3273

Read full description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

CVSS 7.3 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

3.0/10

REALITY · THREAT PRIORITY

8.6/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 7.3: +1.09
Fresh EPSS: 100.00%: +0.50

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 21 documents and public datasets.

Hype components

Headline sample (25%)

70/100

Press, 30 days (60%)

20/100

Grounded branding (15%)

0/100

HYPE TOTAL30/100

Sources and documents

SC Media

Press · 16 Oct 2026, 07:00 · Proxyjacking campaign exploits vulnerabilities to monetize internet connections - SC Media

CyberSecurityNews

Press · 16 Oct 2026, 07:00 · Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks - CyberSecurityNews

Cyber Press

Press · 16 Oct 2026, 06:31 · Hackers Hijack 143 Devices Across 34 Countries to Turn Them Into Residential Proxies - Cyber Press

BleepingComputer

Press · 15 Oct 2026, 07:00 · Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth - BleepingComputer

Rescana

Press · 15 Apr 2026, 07:00 · Microsoft Patch Tuesday April 2026: Critical Vulnerabilities, RDP and Secure Boot Zero-Days Impacting Windows Systems - Rescana

See all 21 source documents

BleepingComputer

Press · 13 Nov 2024, 08:00 · Critical bug in EoL D-Link NAS devices now exploited in attacks - BleepingComputer

BleepingComputer

Press · 08 Nov 2024, 08:00 · D-Link won’t fix critical flaw affecting 60,000 older NAS devices - BleepingComputer

cyfirma

Press · 29 May 2024, 07:00 · Threat Actors Actively Exploiting CVE-2024-3273 : Underground Forums Share IP Addresses of Vulnerable D-Link NAS Devices - cyfirma

Check Point Research

Press · 15 Apr 2024, 07:00 · 15th April – Threat Intelligence Report - Check Point Research

SecurityWeek

Press · 12 Apr 2024, 07:00 · Exploitation of Unpatched D-Link NAS Device Vulnerabilities Soars - SecurityWeek

The Record from Recorded Future News

Press · 11 Apr 2024, 07:00 · Vulnerabilities in end-of-life D-Link devices are being exploited, CISA says - The Record from Recorded Future News

Stormshield

Press · 10 Apr 2024, 07:00 · D-Link critical vulnerabilities CVE-2024-3272 & CVE-2024-3273 - Stormshield

SecurityWeek

Press · 09 Apr 2024, 07:00 · Exploitation Attempts Target Unpatched Flaw Affecting Many D-Link NAS Devices - SecurityWeek

TechTarget

Press · 08 Apr 2024, 07:00 · Flaws in legacy D-Link NAS devices under attack - TechTarget

The Cyber Express

Press · 08 Apr 2024, 07:00 · Decoding D-Link NAS Vulnerabilities: Risks and Mitigation - The Cyber Express

GreyNoise

Press · 08 Apr 2024, 07:00 · CVE-2024-3273: D-Link NAS RCE Exploited in the Wild - GreyNoise

Ars Technica

Press · 08 Apr 2024, 07:00 · Critical takeover vulnerabilities in 92,000 D-Link devices under active exploitation - Ars Technica

Help Net Security

Press · 08 Apr 2024, 07:00 · 92,000+ internet-facing D-Link NAS devices accessible via "backdoor" account (CVE-2024-3273) - Help Net Security

TechTarget

Press · 08 Apr 2024, 07:00 · Flaws in legacy D-Link NAS devices under attack - TechTarget

Security Affairs

Press · 07 Apr 2024, 07:00 · Over 92,000 Internet-facing D-Link NAS devices can be easily hacked - Security Affairs

BleepingComputer

Press · 06 Apr 2024, 07:00 · Over 92,000 exposed D-Link NAS devices have a backdoor account - BleepingComputer

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 3.0 · reality 8.6 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 7.3; EPSS 100.0%
Attention, last 30 days: 4 distinct story titles; 4 press documents; 1 publisher domains.
Technical potential: network access, no prior privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:12.500772+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

Published

04 Apr 2024, 01:00

First press mention

06 Apr 2024, 07:00

Added to the CISA KEV catalog

11 Apr 2024, 00:00

Latest press mention

16 Oct 2026, 07:00

Score calculated

05 Nov 2026, 13:59