D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
D-Link · Multiple NAS Devices
Date added (CISA)
2024-04-11
Remediation due
2024-05-02
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.