Get all your news in one place.
100's of premium titles.
One app.
Start reading
Tom’s Hardware
Tom’s Hardware
Technology
Jowi Morales

D-Link refuses to patch a security flaw on over 60,000 NAS devices — the company instead recommends replacing legacy NAS with newer models

Link DLink
D-Link DNS-325 NAS.

Security researcher Netsecfish discovered a critical flaw in several popular D-Link NAS models that could allow an unauthenticated attacker to execute a command injection attack via an HTTP GET request. According to Netsecfish’s Notion site (h/t BleepingComputer), the vulnerability is in the account_mgr.cgi script, where they could add the malicious input in the name parameter to execute the exploit. This issue is tracked in the National Vulnerability Database (NVD) as CVE-2024-10914 and declared a critical flaw with a severity score 9.2.

The following D-Link models are affected by the issue: DNS-320 Version 1.00, DNS-320LW Version 1.01.0914.2012, DNS-325 Version 1.01, Version 1.02, and DNS-340L Version 1.08.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
'I didn't know this place existed': Britney Spears enjoys family day at Dollywood
Britney Spears enjoyed a visit to Dollywood with her two sons - but admitted she hadn't been aware the theme park "existed" before their trip.
BANG Premier
BANG Premier
How Jim Bakker became the Johnny Carson of Christian TV
When I was researching my 2017 book, “PTL: The Rise and Fall of Jim and Tammy Faye Bakker’s Evangelical Empire,” I interviewed dozens of former staffers and supporters of PTL, the ministry, television and theme park empire that the Bakkers built starting in the 1970s.
The Conversation
The Conversation
GTA 6 Full Nudity and Censorship Updates: Quick Facts on Jason and Lucia in the Upcoming Release
An IGN gameplay demonstration showed GTA VI protagonist Jason naked in a shower, while official ratings confirm nudity and sexual content. The extent of explicit imagery remains unclear
International Business Times UK
International Business Times UK
Nearly Two in Three Students Who Vape Use Geek Bar as 1.44 Million U.S. Youth Report E-Cigarette Use
About 1.44 million U.S. students vape, and 64% of them use Geek Bar, a new 2025 youth survey analysis shows. Here is what parents should know now.
Medical Daily
Medical Daily
Kourtney Kardashian had fiery response to that viral Jennifer Lawrence video
Kourtney Kardashian was furious after seeing a video of Jennifer Lawrence calling her "more annoying than ever".
BANG Premier
BANG Premier
Freddie Jackson, romantic US singer with 10 R&B chart-toppers, dies aged 70
Celebrated for his earnest, dextrous voice, Jackson crossed into the pop charts with the hits Rock Me Tonight (For Old Times Sake) and You Are My Lady
The Guardian - UK
The Guardian - UK
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.
Download on the AppStore Get it on Google Play