Known vulnerabilities in D-Link DNS-320
Vendor:
D-Link
Software:
D-Link DNS-320
Software CPE:
cpe:2.3:h:d-link:d-link_dns-320:*:*:*:*:*:*:*:*
Website:
https://www.dlink.com/
Total vulnerabilities:
3
Public exploits:
2
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100213 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-10914 |
CWE-78 | Critical | - | 11.11.2024 |
SB2024111113 |
||
| #VU9871 - Hidden Functionality (Backdoor) |
CWE-912 | Critical | - | 08.01.2018 |
SB2017120506 SB2018010805 |
||
| #VU6676 - Untrusted Search Path CVE-2017-7494 |
CWE-426 | Medium | - | 24.05.2017 |
SB2017052410 SB2017052413 SB2017052414 and 20 more |