CVE-2024-3272CISA KEVEPSS p99.9%

CVE-2024-3272D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

D-Link / Multiple NAS Devices

Description

D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.

Scoring

EPSS98.04% probability of exploitation · percentile 99.9% · 2026-06-16T12:03:06Z

CISA KEV entry

Added to KEV: 2024-04-11

(incoming)1

TypeTargetConfidenceTier
KEVEntryD-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerabilitykev-cve-2024-32720%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
D-Link Multiple NAS Devices Command Injection Vulnerability
CVE
D-Link DNS-320 Device Command Injection Vulnerability
CVE
D-Link DNS-320 Remote Code Execution Vulnerability
CVE
D-Link DIR-820L Remote Code Execution Vulnerability
CVE
CVE-2026-4206
CVE
CVE-2025-62777
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.