Dns-323 Firmware vulnerabilities

40 known vulnerabilities in Dns-323 Firmware from D-Link. 40 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

40vulnerabilities

35critical

5high

2exploited

9.7average CVSS score

Latest first

8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5214Mar 31, 2026D-Link
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impac
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5213Mar 31, 2026D-Link
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5212Mar 31, 2026D-Link
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
8.8 High severity
DNS-120: Out-of-bounds Write
CVE-2026-5211Mar 31, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vuln
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4214Mar 16, 2026D-Link
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issu
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4213Mar 16, 2026D-Link
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4212Mar 16, 2026D-Link
A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up t
9.8 Critical severity
DNS-120: Out-of-bounds Write
CVE-2026-4211Mar 16, 2026D-Link
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4210Mar 16, 2026D-LinkEPSS 4.6%
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4209Mar 16, 2026D-LinkEPSS 7.65%
A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4207Mar 16, 2026D-LinkEPSS 7.07%
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4206Mar 16, 2026D-LinkEPSS 6.07%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4205Mar 16, 2026D-LinkEPSS 4.52%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4204Mar 16, 2026D-LinkEPSS 4.47%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4203Mar 16, 2026D-LinkEPSS 5.05%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Im
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4197Mar 16, 2026D-LinkEPSS 21.8%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affec
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4196Mar 16, 2026D-LinkEPSS 4.83%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205.
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2026-4195Mar 16, 2026D-LinkEPSS 4.52%
A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affe
9.8 Critical severity
DNS-120: Incorrect Privilege Assignment
CVE-2026-4194Mar 16, 2026D-LinkEPSS 5.59%
A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Th
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8214Aug 27, 2024D-LinkEPSS 5.18%
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-0
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8213Aug 27, 2024D-LinkEPSS 7.18%
A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2024-8212Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8211Aug 27, 2024D-LinkEPSS 5.41%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8210Aug 27, 2024D-LinkEPSS 7.48%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8134Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8133Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8132Aug 24, 2024D-LinkEPSS 24.4%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It ha
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8131Aug 24, 2024D-LinkEPSS 8.21%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and cl
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8130Aug 24, 2024D-LinkEPSS 7.95%
A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 a
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8129Aug 24, 2024D-LinkEPSS 23.8%
A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 an
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8128Aug 24, 2024D-LinkEPSS 8.03%
A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-8127Aug 24, 2024D-LinkEPSS 6.73%
A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-0
9.8 Critical severity
DNS-120: Improper Neutralization of Special Elements used in a Command
CVE-2024-7922Aug 19, 2024D-LinkEPSS 20.3%
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and cl
8.8 High severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7832Aug 15, 2024D-LinkEPSS 2.14%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and D
9.8 Critical severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7831Aug 15, 2024D-LinkEPSS 1.82%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05
9.8 Critical severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7830Aug 15, 2024D-LinkEPSS 1.82%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-7
9.8 Critical severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7829Aug 15, 2024D-LinkEPSS 1.82%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345,
9.8 Critical severity
DNS-120: Buffer Copy without Checking Size of Input
CVE-2024-7828Aug 15, 2024D-LinkEPSS 16.2%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-11
9.8 Critical severity
D-Link Multiple NAS Devices Command Injection Exploited
CVE-2024-3273Apr 4, 2024D-LinkEPSS 100%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Reque
9.8 Critical severity
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Exploited
CVE-2024-3272Apr 4, 2024D-LinkEPSS 98.1%
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the com

Dns-323 Firmware vulnerabilities

Latest first

D-Link Multiple NAS Devices Command Injection Exploited

D-Link Multiple NAS Devices Use of Hard-Coded Credentials Exploited