Dns-320 Firmware vulnerabilities

47 known vulnerabilities in Dns-320 Firmware from D-Link. 47 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

47vulnerabilities

39critical

8high

4exploited

9.5average CVSS score

Latest first

7.2 High severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8273May 11, 2026D-LinkEPSS 7.39%
A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation causes os command injection. It is possible to initiate the attac
7.2 High severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8272May 11, 2026D-LinkEPSS 6.13%
A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile_mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The ex
7.2 High severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2026-8271May 11, 2026D-LinkEPSS 5.1%
A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted element is the function cgi_speed/cgi_dhcpd_lease/cgi_ddns/cgi_set_ip/cgi_upnp_del/cgi_dhcpd/cgi_upnp_add/cgi_upnp_edit of the file /cgi-bin/network_mgr.cgi. The manipulation leads to os co
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5214Mar 31, 2026D-Link
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impac
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5213Mar 31, 2026D-Link
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5212Mar 31, 2026D-Link
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5211Mar 31, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vuln
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4214Mar 16, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issu
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4213Mar 16, 2026D-Link
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4212Mar 16, 2026D-Link
A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up t
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4211Mar 16, 2026D-Link
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4210Mar 16, 2026D-LinkEPSS 4.6%
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4209Mar 16, 2026D-LinkEPSS 7.65%
A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4207Mar 16, 2026D-LinkEPSS 7.07%
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4206Mar 16, 2026D-LinkEPSS 6.07%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4205Mar 16, 2026D-LinkEPSS 4.52%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4204Mar 16, 2026D-LinkEPSS 4.47%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4203Mar 16, 2026D-LinkEPSS 5.05%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Im
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4197Mar 16, 2026D-LinkEPSS 21.8%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4196Mar 16, 2026D-LinkEPSS 4.83%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4195Mar 16, 2026D-LinkEPSS 4.52%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affe
9.8 Critical severity
DNS-120: Incorrect Privilege Assignment
CVE-2026-4194Mar 16, 2026D-LinkEPSS 5.59%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-10915Nov 6, 2024D-LinkEPSS 83.2%
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argum
9.8 Critical severity
DNS-320: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2024-10914Nov 6, 2024D-LinkEPSS 97.5%
A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation o
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8214Aug 27, 2024D-LinkEPSS 5.18%
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-0
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8213Aug 27, 2024D-LinkEPSS 7.18%
A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2024-8212Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8211Aug 27, 2024D-LinkEPSS 5.41%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8210Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8134Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8133Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8132Aug 24, 2024D-LinkEPSS 24.4%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8131Aug 24, 2024D-LinkEPSS 8.21%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and cl
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8130Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 a
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8129Aug 24, 2024D-LinkEPSS 23.8%
A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 an
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8128Aug 24, 2024D-LinkEPSS 8.03%
A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8127Aug 24, 2024D-LinkEPSS 6.73%
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-0
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2024-7922Aug 19, 2024D-LinkEPSS 20.3%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and cl
8.8 High severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7832Aug 15, 2024D-LinkEPSS 2.14%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and D
9.8 Critical severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7831Aug 15, 2024D-LinkEPSS 1.82%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05