Advisories · Technology

D-Link DNS-320L.

Every CVE that names D-Link DNS-320L among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82691 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection
- D-Link DNS-320L
- D-Link DNS-327L
- Command injection
Not analysed yet 31 Aug 2026
CVE-2026-82689 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
- D-Link DNS-320L
- D-Link DNS-327L
- Command injection
Not analysed yet 31 Aug 2026
CVE-2026-16448 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 21 Jul 2026
CVE-2026-5312 CVE record

CVSS 6.9 Medium

D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control
- D-Link DNS-120
- D-Link DNR-202L
- Privilege escalation
- Broken access control
Not analysed yet 1 Apr 2026
CVE-2026-5311 CVE record

CVSS 6.9 Medium

D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control
- D-Link DNS-120
- D-Link DNR-202L
- Privilege escalation
- Broken access control
Not analysed yet 1 Apr 2026
CVE-2026-5215 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control
- D-Link DNS-120
- D-Link DNR-202L
- Privilege escalation
- Broken access control
Not analysed yet 31 Mar 2026
CVE-2026-5214 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 31 Mar 2026
CVE-2026-5213 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 31 Mar 2026
CVE-2026-5212 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 31 Mar 2026
CVE-2026-5211 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 31 Mar 2026
CVE-2026-4214 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2026-4213 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2026-4212 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2026-4211 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2026-4210 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4209 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4207 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4206 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4205 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4204 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4203 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4197 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 15 Mar 2026
CVE-2026-4196 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 15 Mar 2026
CVE-2026-4195 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 wizard_mgr.cgi command injection
- D-Link DNS-120
- D-Link DNR-202L
- Other injection
- Command injection
Not analysed yet 15 Mar 2026
CVE-2026-4194 CVE record

CVSS 6.9 Medium

D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control
- D-Link DNS-120
- D-Link DNR-202L
- Privilege escalation
- Broken access control
Not analysed yet 15 Mar 2026
CVE-2024-8214 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 27 Aug 2024
CVE-2024-8213 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 27 Aug 2024
CVE-2024-8212 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 27 Aug 2024
CVE-2024-8211 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 27 Aug 2024
CVE-2024-8210 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 hd_config.cgi sprintf command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 27 Aug 2024
CVE-2024-8134 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8133 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8132 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8131 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8130 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8129 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8128 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-8127 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 24 Aug 2024
CVE-2024-7922 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 19 Aug 2024
CVE-2024-7849 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 15 Aug 2024
CVE-2024-7832 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 15 Aug 2024
CVE-2024-7831 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 15 Aug 2024
CVE-2024-7830 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 15 Aug 2024
CVE-2024-7829 CVE record

CVSS 8.7 High

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 15 Aug 2024
CVE-2024-7828 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow
- D-Link DNS-120
- D-Link DNR-202L
- Memory corruption
Not analysed yet 15 Aug 2024
CVE-2024-7715 CVE record

CVSS 5.3 Medium

D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection
- D-Link DNS-120
- D-Link DNR-202L
- Command injection
Not analysed yet 13 Aug 2024
CVE-2024-3274 CVE record

CVSS 5.3 Medium

D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure
- D-Link DNS-320L
- D-Link DNS-320LW
- Information disclosure
Not analysed yet 4 Apr 2024
CVE-2024-3273 CVE record

CVSS 7.3 HighCritical · KEV, CVSS 7+ and EPSSKEV

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
- D-Link DNS-320L
- D-Link DNS-325
- Command injection
Not analysed yet 4 Apr 2024
CVE-2024-3272 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
- D-Link DNS-320L
- D-Link DNS-325
- Hard-coded credentials
Not analysed yet 4 Apr 2024