D-Link Warns of Unpatched DGS-3130 Switch Flaws, Urges Management Access Restrictions

D-Link disclosed multiple unpatched vulnerabilities in its DGS-3130 series managed Gigabit stackable switches and issued mitigation guidance while firmware fixes remain unavailable. Discovered by network engineer Giresh Kumar Enugu, the flaws affect D-Link Discovery Protocol (DDP) authentication, access control, information handling, and firmware security architecture. An attacker with access to the affected network could potentially obtain sensitive device information, change credentials or configurations without authorization, expose SNMP community strings, or disrupt services and reset devices.

Multiple firmware versions of the DGS-3130-30TS are confirmed affected, and D-Link is investigating whether other switching platforms are vulnerable. No CVE identifiers were publicly available at the time of reporting. Administrators should disable DDP, restrict and isolate management access, remove unnecessary or default SNMP community strings, maintain offline configuration backups, and monitor for unexpected configuration changes or suspicious device activity pending firmware fixes.