CVE-2025-44023

The D-Link DNS-320 (v.1.00) and DNS-320LW (v.1.01.0914.20212) NAS devices are vulnerable to arbitrary code execution due to a flaw in the account_mgr.cgi component, specifically within the cgi_chg_admin_pw function. This issue is categorized as an Improper Neutralization of Special Elements used ...