---
id: "TECH-202611-eqjfj5"
page: "https://infrastack.ai/live/TECH-202611-eqjfj5"
kind: "technique"
aliases: []
title: "Unpatched D-Link DGS-3130 switch flaws in the D-Link Discovery Protocol (DDP) let someone on the network read device data, change credentials and config, and reset the switch (no fix, no CVE yet)"
severity: "high"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "D-Link DGS-3130", "fixed": [], "affected": "DGS-3130-30TS, multiple firmware versions (unspecified)", "ecosystem": "vendor"}]
ecosystems: []
tags: ["early-warning", "technique"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-06T12:42:42+00:00"
updated_at: "2026-11-06T12:43:00+00:00"
sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-11-06T12:42:42+00:00"}]
exploit_sources: []
---

# Unpatched D-Link DGS-3130 switch flaws in the D-Link Discovery Protocol (DDP) let someone on the network read device data, change credentials and config, and reset the switch (no fix, no CVE yet)

Link for people: https://infrastack.ai/live/TECH-202611-eqjfj5 (this .md is for agents)

On 6 Nov 2026 D-Link warned of several unpatched flaws in DGS-3130 series managed stackable switches, found by researcher Giresh Kumar Enugu. The bugs are in D-Link Discovery Protocol (DDP) authentication, access control and information handling. An attacker with access to the switch's network can get sensitive device information, make unauthorized admin, credential and configuration changes, leak SNMP community strings, or disrupt service and reset the device. Confirmed affected: multiple DGS-3130-30TS firmware versions. D-Link is still checking other switching platforms and firmware security parts (SSH configuration, OS credential safeguards, firmware encryption and embedded keys). D-Link has not published details or CVE IDs. Exploitation in the wild: unknown, none reported.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:D-Link DGS-3130 affected DGS-3130-30TS, multiple firmware versions (unspecified) fixed no fixed version listed

## How to check

Find D-Link DGS-3130 series switches, especially DGS-3130-30TS, in your inventory. Check whether DDP (D-Link Discovery Protocol) is enabled, whether default or unused SNMP community strings are set, and whether SSH, web UI or SNMP can be reached from user or untrusted networks. In switch logs, look for unexpected configuration changes, unprompted reboots or factory resets. Specific affected firmware versions: unknown (D-Link says multiple DGS-3130-30TS versions).

## Fix

No firmware fix yet. Follow D-Link's mitigations now: disable DDP, remove unnecessary or default SNMP community strings, allow SSH, web UI and SNMP only from an isolated management network and named admin hosts, keep offline backups of switch configurations, and watch logs for unexpected config changes, reboots or factory resets. Install new firmware when D-Link releases it.

## Timeline

- 2026-11-06T12:42:42+00:00 analyst

## Documents

- [describes] @BleepinComputer: D-Link warns of multiple zero-days in DGS-3130 Series switches
https://t.co/vZB6 https://x.com/BleepinComputer/status/2118684227147350081
- [describes] D-Link warns of multiple zero-days in DGS-3130 Series switches https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_