Back

D-Link Details Reported DGS-3130-30TS Security Flaws

lite News Desk 2 min read

Reported security flaws in D-Link’s DGS-3130-30TS managed switch remained without corrective firmware when the company published interim advisory SAP10523 on November 6, 2026. The advisory covers D-Link Discovery Protocol (DDP) and firmware-security issues. D-Link said a release date for corrective firmware was not confirmed, and the associated CVE records were not yet public.

According to D-Link, an attacker who has access to the affected network could potentially retrieve sensitive information about devices or the network, expose SNMP community information, perform administrative actions without authorization, alter configurations, reset equipment or interrupt services. The advisory states that exploitation was demonstrated during controlled testing.

The reported findings cover authentication, access restrictions and information handling within DDP. Separate firmware findings concern SSH settings, safeguards for operating-system credentials, encryption of firmware and cryptographic material embedded within it, according to the advisory.

Testing used a DGS-3130-30TS with hardware revision B1, D-Link said. The examined firmware releases were 2.00.B014, 2.00.B034, 2.04.000 and 2.04.001, although the versions relevant to each finding may differ. At publication, the company was still investigating whether other models in the DGS-3130 range or other D-Link switch platforms were affected; that scope remained unconfirmed.

As its principal interim measure, D-Link said customers should turn off DDP both across the switch and on applicable interfaces. According to the company, the researcher’s tests showed that this stopped processing of the tested DDP attack paths. D-Link was still assessing the measure, which does not address the separate firmware-security findings and could affect workflows using DDP.

The company also said customers should delete SNMP community strings that are unnecessary or set to defaults, including public and private. That step alone would not fix the reported information-disclosure problem in DDP, according to the advisory.

For management access, D-Link said SSH, web-management and SNMP should be restricted to designated management systems and authorized administrators. Its guidance also calls for avoiding exposure directly to the public Internet and turning off unneeded services. The company stated that neither management access restrictions nor VLAN separation alone should be considered adequate protection against the reported DDP problems.

D-Link said the coordinated report arrived on November 2, 2026, from Giresh Kumar Enugu, a network engineer with Spectrum Community Solutions. According to the advisory, the report concerned vulnerabilities identified in an independent assessment of the DGS-3130-30TS.

The advisory also calls for verified backups of switch configurations and log reviews for unanticipated restarts, changes to configurations, interfaces being shut down or resets to factory settings.

* This article is based on publicly available information at the time of writing.

More from Cybersecurity

  1. Docomo’s estimate puts the affected records at up to 300,000; emergency maintenance on both services was still underway on November 6.

  2. Access requires identity verification; organisations must also use single sign-on and multi-factor authentication, with API access restricted by IP allowlisting.

  3. The flaw affects 10 GS1900 models; Zyxel says unauthenticated attackers on the local network could send a crafted HTTP request.

  4. Ubuntu’s proposed kernels for three LTS releases remain in qualification testing and are not included in upgrades by default.

  5. The NCSC says attackers are likely to use AI to target known flaws in older infrastructure technology by 2028.