D-Link warns of multiple unpatched zero-days in DGS-3130 switches
Summary
D-Link disclosed multiple unpatched DGS-3130 switch vulnerabilities involving DDP and firmware security components. Potential impacts include data exposure, unauthorized configuration changes and service disruption; D-Link recommends mitigations pending firmware updates
Key points
- D-Link shared mitigations for multiple unpatched vulnerabilities affecting DGS-3130-series managed switches; CVE identifiers have not yet been disclosed.
- Spectrum Community Solutions network engineer Giresh Kumar Enugu found flaws involving D-Link Discovery Protocol authentication, access control and information handling.
- Successful exploitation may expose sensitive device information or SNMP communities, enable unauthorized credential or configuration changes, or disrupt services and reset devices.
- The zero-days affect multiple DGS-3130-30TS firmware versions; D-Link is investigating possible impact on other switching platforms and firmware security mechanisms.
- Until firmware updates are available, D-Link advises disabling DDP, removing unnecessary or default SNMP community strings, and limiting SSH, web UI and SNMP access to isolated management networks and designated admin hosts.
- D-Link also recommends keeping offline configuration backups and monitoring logs for unexpected configuration changes, reboots or factory resets.
Article Details
- Vulnerability Types
- D-Link Discovery Protocol (DDP) authentication flaws
- DDP access-control flaws
- DDP information-handling flaws
- Flaws involving components of the device firmware security architecture
- Severity
- Not disclosed
- Affected Versions
- DGS-3130-30TS firmware (multiple versions; specific versions not disclosed)
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- unavailable
- Workarounds
- Disable DDP.
- Remove unnecessary or default SNMP community strings.
- Restrict SSH, web UI, and SNMP access to isolated management networks and designated admin hosts.
- Maintain offline switch configuration backups.
- Monitor device logs for unexpected configuration changes, unprompted reboots, or factory resets.
People
Vendors
Products
DGS-3130 SeriesD-Link warns of multiple zero-days in DGS-3130 Series switchesDGS-3130-30TSThe zero-days affect multiple DGS-3130-30TS firmware versions, and the company is still investigating the impact on other D-Link switching platforms and firmware security mechanisms (including SSH service security