Known vulnerabilities in D-Link DNS-325

Vendor: D-Link
Software: D-Link DNS-325
Software CPE: cpe:2.3:h:d-link:d-link_dns-325:*:*:*:*:*:*:*:*
Website: https://www.dlink.com/
Total vulnerabilities: 3
Public exploits: 3
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting D-Link DNS-325 D-Link DNS-325 is affected by 3 known vulnerabilities: 3 critical Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100213 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-10914		 CWE-78 Critical
Available
Exploited
 - 11.11.2024 SB2024111113
#VU88210 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-3273		 CWE-78 Critical
Available
Exploited
 - 08.04.2024 SB2024040827
#VU88209 - Use of Hard-coded Credentials
CVE-2024-3272		 CWE-798 Critical
Available
Exploited
 - 08.04.2024 SB2024040827