Sign inStart freeBook a demo

DNS-320 Firmware vulnerabilitiesAnd the versions its exploited flaws hit.

Product4 known exploited7 versions
The short answer

DNS-320 Firmware is made by Dlink. We track 27 published vulnerabilities in it, across 7 versions. 4 of them are on the list of flaws known to be exploited, the newest added on 11 April 2024. If you run DNS-320 Firmware, check your version against the exploited flaws below and patch those first.

Check your version

The most recent DNS-320 Firmware flaw added to the known-exploited list is CVE-2024-3272, on 11 April 2024. We keep watching the known-exploited list.

Versions

Which versions of DNS-320 Firmware do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

  • CVE-2019-16057Exploited list, 15 Apr 2022

    D-Link DNS-320 Remote Code Execution Vulnerability

    up to 2.05.b10
  • CVE-2020-25506Exploited list, 3 Nov 2021

    D-Link DNS-320 Device Command Injection Vulnerability

    2.06b01

2 more exploited flaws name DNS-320 Firmware without a version of its own, for example as the system other affected software runs on. They are in the list below.

Known exploited

Which DNS-320 Firmware vulnerabilities are being exploited?

4 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 9.8
    CVE-2024-3272CriticalKnown exploited
    D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

    D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution.

    Chance of use98%Known exploited since11 Apr 2024
  2. 7.3
    CVE-2024-3273HighKnown exploited
    D-Link Multiple NAS Devices Command Injection Vulnerability

    D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability.

    Chance of use>99%Known exploited since11 Apr 2024
  3. 9.8
    CVE-2019-16057CriticalKnown exploited
    D-Link DNS-320 Remote Code Execution Vulnerability

    The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution.

    Chance of use86%Known exploited since15 Apr 2022
  4. 9.8
    CVE-2020-25506CriticalKnown exploited
    D-Link DNS-320 Device Command Injection Vulnerability

    D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.

    Chance of use>99%Known exploited since3 Nov 2021
Exploit likelihood

Which DNS-320 Firmware flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. >99%
    CVE-2024-3273HighKnown exploited

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403.

    CVSS7.3Published4 Apr 2024
  2. >99%
    CVE-2020-25506CriticalKnown exploited

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

    CVSS9.8Published2 Feb 2021
  3. 98%
    CVE-2024-3272CriticalKnown exploited

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403.

    CVSS9.8Published4 Apr 2024
  4. 86%
    CVE-2019-16057CriticalKnown exploited

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    CVSS9.8Published16 Sep 2019
  5. 23%
    CVE-2024-8129Medium

    A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343,...

    CVSS5.3Published24 Aug 2024
Precursor Intelligence

Running DNS-320 Firmware? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 27 published vulnerabilities listed under the name DNS-320 Firmware, across 7 versions. The most recent DNS-320 Firmware flaw added to the known-exploited list is CVE-2024-3272, on 11 April 2024.

4 are on the list of flaws known to be exploited. The most recently added are CVE-2024-3272, CVE-2024-3273 and CVE-2019-16057.

Each flaw names its own versions, usually as ranges. The newest, CVE-2019-16057, affects up to 2.05.b10. The versions for every exploited flaw are listed on this page.

Create a Precursor Intelligence account and track DNS-320 Firmware. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring