A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-…

A critical stack-based buffer overflow vulnerability has been identified in multiple D-Link NAS devices including DNS and DNR series models. The vulnerability affects the Local_Backup_Info function in /cgi-bin/local_backup_mgr.cgi file through manipulation of the f_idx argument. The flaw can be exploited remotely and public exploit code is available, making it a high-priority security concern. Affected devices include over 20 different D-Link NAS models up to firmware version 20260205. The vulnerability poses significant risk due to its remote exploitability and publicly available exploit code.