D-Link停止維護的多款NAS機型被揭露多個漏洞，全球逾9.2萬臺設備恐被植入後門
· 2024-04-09
D-Link已不再維護的網路儲存設備被發現新漏洞，攻擊者有可能將其用於任意命令，或是竄改系統配置，甚至發動阻斷服務（DoS）攻擊
研究人員Netsecfish揭露存在於D-Link網路儲存設備（NAS）的漏洞CVE-2024-3273，影響DNS-340L、DNS-320L、DNS-327L、DNS-325等機種，CVSS風險評分為7.3，估計全球有92,589臺NAS曝險。這些設備還是因為直接連上網際網路而被找到，若將未連上網路的設備也納入，受影響範圍應該還會更大。
此漏洞存在於名為nas_sharing.cgi的URI，主要涵蓋2項弱點，其中一個是因為帳密寫死而形成的後門，另一個則是系統參數存在命令注入漏洞，上述弱點一旦遭到利用，攻擊者就有機會在NAS執行任意命令，從而存取敏感資訊、竄改系統配置，或是造成阻斷服務（DoS）。
值得留意的是，由於這些NAS設備的生命週期已經結束（EOL），D-Link表明將不會提供相關修補，並呼籲用戶應儘速淘汰這些設備。
Popular articles
Kazakhstan plans to penalise online casino promotions
Regulation
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
British gambling levy rates confirmed for each vertical
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
