CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link End-of-Life (EOL) NAS Hard-Coded Credentials Vulnerability (CVE-2024-3272) Technical Advisory
[Affected Scope] All firmware versions of legacy D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L.
[Impact] Remote unauthenticated attackers can bypass authentication using hard-coded credentials, leading to complete system compromise and arbitrary code execution.
[Mitigation] Since these devices are End-of-Life (EOL) and will not receive security patches, they must be immediately decommissioned and replaced.
Acclaim USAHERDS Hard-coded Credentials Vulnerability (CVE-2021-44207) Security Advisory
[Affected Scope] Acclaim Systems USAHERDS through version 7.4.0.1
[Impact] Attackers can exploit hard-coded credentials to bypass authentication and achieve remote code execution (RCE)
[Mitigation] Immediately upgrade to the patched version and restrict external network access to the application