---
title: D-Link SAP10523: unpatched DDP and firmware flaws on DGS-3130-30TS — disable DDP now, no fix date yet | ctxsec
url: https://ctxsec.com/items/dlink-dgs-3130-sap10523-ddp-firmware-zero-days-interim
description: "D-Link published interim advisory SAP10523 after a Nov 2 coordinated disclosure from Spectrum Community Solutions engineer Giresh Kumar Enugu. On the assessed DGS-3130-30TS hardware revision B1 (firmware builds examined: 2.00.B014, 2.00.B034, 2.04.000, 2.04.001), D-Link Discovery Protocol (DDP) authentication/access-control/info-handling weaknesses can let a network-adjacent attacker reach DDP admin functions, leak config/SNMP communities, change credentials, reset the box, or disrupt service. Separate firmware findings (SSH hardening, OS credential protection, firmware crypto material) are still under review and are not fixed by turning DDP off. Other DGS-3130 models and D-Link switching platforms are under investigation. No corrective firmware or public CVE IDs yet."
status: "official (D-Link SAP10523 interim advisory, published Nov 6 12:16 GMT / last updated 12:30 GMT); no public CVE IDs yet; no firmware fix yet; researcher-demonstrated on DGS-3130-30TS H/W Rev. B1"
published: 2026-11-06
---

> D-Link published interim advisory SAP10523 after a Nov 2 coordinated disclosure from Spectrum Community Solutions engineer Giresh Kumar Enugu. On the assessed DGS-3130-30TS hardware revision B1 (firmware builds examined: 2.00.B014, 2.00.B034, 2.04.000, 2.04.001), D-Link Discovery Protocol (DDP) authentication/access-control/info-handling weaknesses can let a network-adjacent attacker reach DDP admin functions, leak config/SNMP communities, change credentials, reset the box, or disrupt service. Separate firmware findings (SSH hardening, OS credential protection, firmware crypto material) are still under review and are not fixed by turning DDP off. Other DGS-3130 models and D-Link switching platforms are under investigation. No corrective firmware or public CVE IDs yet.

[← Cybersecurity News](/news) · [markdown](/items/dlink-dgs-3130-sap10523-ddp-firmware-zero-days-interim.md)

official (D-Link SAP10523 interim advisory, published Nov 6 12:16 GMT / last updated 12:30 GMT); no public CVE IDs yet; no firmware fix yet; researcher-demonstrated on DGS-3130-30TS H/W Rev. B1

2026-11-06

### D-Link SAP10523: unpatched DDP and firmware flaws on DGS-3130-30TS — disable DDP now, no fix date yet

- **Confirmed test target:** DGS-3130-30TS H/W Rev. B1; other DGS-3130 SKUs and platforms listed as under investigation only.
- **Do now (vendor interim):** `no ddp` globally and on interfaces; remove default SNMP communities (`public`/`private`); prefer SNMPv3; keep SSH/web/SNMP off the public Internet and on a tight management path.
- **Caveat:** D-Link says management ACLs/VLAN separation alone are not enough against the reported DDP issues, and disabling DDP does not fix the separate firmware findings.
- Watch SAP10523 for CVE IDs and a named fixed build before assuming any existing firmware is clean.

Sources: [D-Link SAP10523: DGS-3130-30TS DDP and firmware vulnerabilities (interim, Nov 6)](https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10523) · [BleepingComputer: D-Link warns of multiple zero-days in DGS-3130 Series switches](https://www.bleepingcomputer.com/news/security/d-link-warns-of-multiple-zero-days-in-dgs-3130-series-switches/)