Is CVE-2024-3272 actively exploited?

CVE-2024-3272 has no public evidence of in-the-wild exploitation as of 2025-10-30.

What is the CVSS score for CVE-2024-3272?

CVE-2024-3272 has a CVSS score of 9.8 (CRITICAL severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2024-3272?

Patch guidance is available from dlink security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-3272.

Fix CVE-2024-3272 - CRITICAL dlink dns-320l firmware

Q: Which products are affected by CVE-2024-3272?

23 products: dlink dns-320l firmware, dlink dns-320l firmware, dlink dns-320l firmware, dlink dns-120 firmware, dlink dnr-202l firmware, and 18 more.

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-798 · Hard-coded Credentials

Metadata

Primary Vendor: DLINK
Published: 4/4/2024
Last Modified: 10/30/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

dlink : dns-320l_firmwaredlink : dns-320l_firmwaredlink : dns-320l_firmwaredlink : dns-120_firmwaredlink : dnr-202l_firmwaredlink : dns-315l_firmwaredlink : dns-320_firmwaredlink : dns-320lw_firmwaredlink : dns-321_firmwaredlink : dnr-322l_firmwaredlink : dns-323_firmwaredlink : dns-325_firmwaredlink : dns-326_firmwaredlink : dns-327l_firmwaredlink : dns-327l_firmwaredlink : dnr-326_firmwaredlink : dns-340l_firmwaredlink : dns-343_firmwaredlink : dns-345_firmwaredlink : dns-726-4_firmwaredlink : dns-1100-4_firmwaredlink : dns-1200-05_firmwaredlink : dns-1550-04_firmware

Remediation Guidance

Executive Summary

View on NIST NVD