D-Link has posted mitigations for multiple unpatched flaws in its DGS-3130 series managed switches, BleepingComputer reports. It’s still investigating other platforms.
What to do (vendor guidance)
- Read D-Link’s advisory for your exact model and firmware
- Until a fix ships: disable DDP (the primary known attack vector per D-Link), remove unnecessary or default SNMP community strings, and keep SSH, the web UI and SNMP on an isolated management network only
- Keep offline config backups, and watch logs for unexpected config changes, reboots or factory resets
D-Link says successful exploitation could let an attacker on the network get sensitive device data, change credentials or configuration, or disrupt service. It hasn’t published CVE IDs yet.
My take
Garlic because there’s no patch yet. If you run these switches, isolate management today and check for a firmware update daily.
God Bless, and Needs Garlic!
