CVE-2024-3273
HIGH KEV NUCLEID-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L - OS Command Injection via nas_sharing.cgi System Parameter
Title source: llmExploitation Summary
CVE-2024-3273 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 11, 2024. EIP tracks 12 public exploits from researchers including Chocapikk, iSee857, adhikara13. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-3273, targeting D-Link NAS devices. The exploit leverages a command injection vulnerability in the `nas_sharing.cgi` endpoint to achieve remote code execution (RCE) as root.
Description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Exploits (12)
This repository contains a functional exploit for CVE-2024-3273, targeting D-Link NAS devices. The exploit leverages a command injection vulnerability in the `nas_sharing.cgi` endpoint to achieve remote code execution (RCE) as root.
The repository contains functional exploit code for multiple CVEs, including CVE-2024-3273 (D-Link NAS). The provided Python scripts demonstrate command execution and SQL injection vulnerabilities with clear technical implementation.
This repository contains a functional Python-based exploit for CVE-2024-3273, a command injection vulnerability in D-Link NAS devices. The exploit targets the `cgi-bin/nas_sharing.cgi` endpoint, allowing arbitrary command execution via a crafted HTTP request with a Base64-encoded payload.
This Python script exploits CVE-2024-3273, a command injection vulnerability in D-Link NAS devices, by sending a crafted HTTP request to the `/cgi-bin/nas_sharing.cgi` endpoint with a base64-encoded command. The exploit supports both single and bulk targeting with concurrent execution.
This Python script exploits CVE-2024-3273, a command injection vulnerability in D-Link NAS devices, by sending a crafted HTTP request to the `/cgi-bin/nas_sharing.cgi` endpoint with a base64-encoded command. The exploit supports both single and bulk targeting, with concurrent execution for efficiency.
This repository contains a functional Python exploit for CVE-2024-3273, a command injection vulnerability in D-Link NAS devices. The exploit targets the `/cgi-bin/nas_sharing.cgi` endpoint via HTTP GET requests, allowing remote code execution (RCE) on affected devices.
This repository contains a detailed security assessment report for CVE-2024-3273, focusing on a command injection vulnerability in D-Link DNS-320L NAS devices via the /cgi-bin/nas_sharing.cgi endpoint. The report includes technical details, impact analysis, and remediation recommendations, but does not include functional exploit code.
This repository contains a detailed security assessment report for CVE-2024-3273, focusing on a command injection vulnerability in D-Link DNS-320L NAS devices via the /cgi-bin/nas_sharing.cgi endpoint. The report includes technical details, impact analysis, and remediation recommendations, but does not include functional exploit code.
The repository contains a functional Python exploit for CVE-2024-3273, targeting a D-Link RCE vulnerability via improper input validation in the `nas_sharing.cgi` script. It includes both single-target exploitation and multi-threaded scanning capabilities.
This repository provides a detailed technical analysis of CVE-2024-3273, a command injection vulnerability in D-Link NAS devices. It includes a breakdown of the vulnerability, affected models, and a code snippet demonstrating the exploit mechanism.
This repository contains a functional exploit for CVE-2024-3273, targeting D-Link NAS devices. The exploit leverages a command injection vulnerability in the `nas_sharing.cgi` endpoint, allowing remote command execution via base64-encoded payloads.
This repository contains a honeypot setup for CVE-2024-3273, a vulnerability affecting D-Link NAS devices. It includes a Python server to simulate the vulnerable device and scripts to clone the web interface for realism.
Nuclei Templates (1)
app="D_Link-DNS-ShareCenter"
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L