D-Link warns of multiple zero-days in DGS-3130 Series switches
D-Link has not disclosed CVE IDs but urges admins to disable DDP and restrict access to management interfaces.
D-Link shared mitigation measures for multiple unpatched security flaws in DGS-3130 series managed Gigabit stackable switches. The vulnerabilities in the D-Link Discovery Protocol (DDP) authentication, access control, and information handling could allow attackers to obtain sensitive device data, make unauthorized changes, leak SNMP communities, or disrupt services. Until new firmware is released, admins should disable DDP, remove default SNMP strings, and restrict access to isolated networks.
Unconfirmed: CVE IDs have not been publicly disclosed.
- Affects DGS-3130-30TS firmware versions
- Researcher Giresh Kumar Enugu identified bugs
- Mitigation: disable DDP, restrict SSH/web/SNMP
- Investigating other D-Link platforms
Impact: unauthorized access and configuration changes
| Product | Affected |
|---|---|
| D-Link DGS-3130 Series switches | multiple firmware versions |
- 1.disable DDP protocol
- 2.restrict management access
- 3.monitor logs for reboots
- Vendors
- D-Link
- Products
- DGS-3130 Series switches
From the original article
2 min read at bleepingcomputer.comD-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.