D-Link SAP10523: unpatched DDP and firmware flaws on DGS-3130-30TS — disable DDP now, no fix date yet

official (D-Link SAP10523 interim advisory, published Nov 6 12:16 GMT / last updated 12:30 GMT); no public CVE IDs yet; no firmware fix yet; researcher-demonstrated on DGS-3130-30TS H/W Rev. B12026-11-06

D-Link SAP10523: unpatched DDP and firmware flaws on DGS-3130-30TS — disable DDP now, no fix date yet

Confirmed test target: DGS-3130-30TS H/W Rev. B1; other DGS-3130 SKUs and platforms listed as under investigation only.
Do now (vendor interim): no ddp globally and on interfaces; remove default SNMP communities (public/private); prefer SNMPv3; keep SSH/web/SNMP off the public Internet and on a tight management path.
Caveat: D-Link says management ACLs/VLAN separation alone are not enough against the reported DDP issues, and disabling DDP does not fix the separate firmware findings.
Watch SAP10523 for CVE IDs and a named fixed build before assuming any existing firmware is clean.

Sources: D-Link SAP10523: DGS-3130-30TS DDP and firmware vulnerabilities (interim, Nov 6) · BleepingComputer: D-Link warns of multiple zero-days in DGS-3130 Series switches