# Dlink Dns-320 Firmware


- [CVE-2024-3272](https://insights.sbomify.com/CVE-2024-3272/): D-Link Multiple NAS Devices Use of Hard-Coded Credentials (critical 9.8, exploited in the wild)
- [CVE-2020-25506](https://insights.sbomify.com/CVE-2020-25506/): D-Link DNS-320 Device Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-16057](https://insights.sbomify.com/CVE-2019-16057/): D-Link DNS-320 Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2024-3273](https://insights.sbomify.com/CVE-2024-3273/): D-Link Multiple NAS Devices Command Injection (high 7.3, exploited in the wild)
- [CVE-2024-10914](https://insights.sbomify.com/CVE-2024-10914/): D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection (critical 9.2)
- [CVE-2024-10915](https://insights.sbomify.com/CVE-2024-10915/): D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection (critical 9.2)
- [CVE-2026-5211](https://insights.sbomify.com/CVE-2026-5211/): D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow (high 8.7)
- [CVE-2026-5212](https://insights.sbomify.com/CVE-2026-5212/): D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow (high 8.7)
- [CVE-2026-5213](https://insights.sbomify.com/CVE-2026-5213/): D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow (high 8.7)
- [CVE-2026-5214](https://insights.sbomify.com/CVE-2026-5214/): D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow (high 8.7)
- [CVE-2026-4211](https://insights.sbomify.com/CVE-2026-4211/): D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow (high 8.7)
- [CVE-2026-4212](https://insights.sbomify.com/CVE-2026-4212/): D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/dlink/dns-320-firmware/