# D-Link Refuses to Fix Dangerous Flaw in 60,000 NAS Devices 🚨

**URL:** <https://onehack.st/t/d-link-refuses-to-fix-dangerous-flaw-in-60-000-nas-devices/295609>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [November 12, 2024, 3:21pm UTC](https://onehack.st/t/d-link-refuses-to-fix-dangerous-flaw-in-60-000-nas-devices/295609 "2024-11-12T15:21:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [November 12, 2024, 3:21pm UTC](https://onehack.st/t/d-link-refuses-to-fix-dangerous-flaw-in-60-000-nas-devices/295609/1 "2024-11-12T15:21:15Z")

</div>

**Summary:**

1. **Unpatched Vulnerability**  
**D-Link** confirmed it will not issue a fix for a **critical flaw** (CVE-2024-10914) affecting over **60,000** older **NAS devices** used by small businesses.

2. **Flaw Details**  
The flaw allows **unauthenticated attackers** to execute arbitrary commands through unsanitized **HTTP requests** , posing significant security risks.

3. **Affected Models**  
The flaw impacts multiple **D-Link NAS models** , including **DNS-320** and **DNS-340L** , with over **61,000 vulnerable devices** discovered.

4. **Security Recommendations**  
D-Link advises users to either **retire** the affected devices or **isolate** them from public internet access to reduce exposure.

5. **Previous Vulnerabilities**  
In addition to the current flaw, earlier this year, a similar **command injection flaw** was discovered, further complicating the security landscape for these devices.

**Read more at:** [BleepingComputer](https://www.bleepingcomputer.com/news/security/d-link-wont-fix-critical-flaw-affecting-60-000-older-nas-devices/)