D-Link NAS risk

A high-severity vulnerability has been discovered in certain D-Link Network Attached Storage (NAS) devices which could run malicious code, steal sensitive data, and mount denial-of-service (DoS) attacks.

The vulnerability is tracked as CVE-2024-3273. There are ~92,000 of these old D-Link NAS devices still in use.  Affected models include, but not limited to: 

DNS-320L Version 1.11, Version 1.03.0904.2013, Version 1.01.0702.2013

DNS-325 Version 1.01

DNS-327L Version 1.09, Version 1.00.0409.2013

DNS-340L Version 1.08

Patches will not be released. Affected models are all far beyond End of Life (EOL). D-Link recommends replacing them with products that are still receiving firmware updates.

Read more...