Use of hard-coded credentials in D-Link products - CVE-2024-3272

Vulnerability details

The vulnerability allows a remote attacker to gain full access to vulnerable system.

The vulnerability exists due to presence of hard-coded credentials in application code. A remote unauthenticated attacker can access the affected device using the hard-coded credentials.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

How to mitigate CVE-2024-3272

The affected devices have reached EOL and are no longer supported by the vendor.

Links to Public Exploits and PoC-codes

• Exploit #9696 - netsecfish dlink (April 9, 2024)
• Exploit #9694 - D-Link-NAS-Devices-Unauthenticated-RCE (UNTESTED exploit script for CVE-2024-3272 + CVE-2024-3273. The script exploits a backdoor authentication bypass + arbitrary command injection vulnerability. ) (April 9, 2024)

External References

• https://vuldb.com/?id.259283
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383

Related Security Bulletins

• Multiple vulnerabilities in D-Link routers