PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-3272 D-Link CVE debrief

CVE-2024-3272 is a hard-coded credentials vulnerability affecting D-Link Multiple NAS Devices. CISA added it to the Known Exploited Vulnerabilities catalog on 2024-04-11, which signals known exploitation risk. The KEV notice states the affected hardware revisions are legacy D-Link products that have reached end-of-life or end-of-service and should be retired and replaced per vendor instructions.

Vendor
D-Link
Product
Multiple NAS Devices
CVSS
CRITICAL 9.8
CISA KEV
Listed
Original CVE published
2024-04-11
Original CVE updated
2024-04-11
Advisory published
2024-04-11
Advisory updated
2024-04-11

Who should care

Organizations still operating legacy D-Link NAS hardware, especially IT administrators, security teams, storage owners, and asset managers responsible for network-attached storage and backup appliances.

Technical summary

CISA identifies this CVE as a use of hard-coded credentials issue in D-Link Multiple NAS Devices. The supplied KEV entry does not provide deeper technical detail or a CVSS score, but it does make clear that the affected hardware revisions are legacy and no longer supported. Because the products are at EOL/EOS, the practical mitigation path is retirement and replacement rather than waiting for a patch.

Defensive priority

Immediate

Recommended defensive actions

  • Inventory D-Link NAS devices and confirm whether any units match the affected legacy products or hardware revisions.
  • Treat any exposed or in-scope affected device as urgent because CISA has placed this CVE in the Known Exploited Vulnerabilities catalog.
  • Follow the vendor/CISA guidance to retire and replace affected hardware that has reached end-of-life or end-of-service.
  • Remove affected devices from production or isolate them until replacement is complete.
  • Review management access paths and restrict unnecessary network exposure while transition plans are in progress.

Evidence notes

This debrief is based only on the supplied CISA KEV metadata and official record links. The corpus identifies the issue as a hard-coded credentials vulnerability, confirms CISA KEV listing on 2024-04-11, and states that the affected D-Link hardware revisions are legacy and should be retired and replaced. No CVSS score or additional impact details were supplied.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-3272 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-3272

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-3272 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-3272

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

  • CISA Known Exploited Vulnerabilities catalog

    Publisher, destination, and source semantics verified

    URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

    Cybersecurity and Infrastructure Security Agency - Official CISA catalog of vulnerabilities known to be exploited in the wild.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

    cisa_kev

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.