D-Link says its DGS-3130 business network switches have unpatched security flaws, so owners should apply the company's temporary protections now.
D-Link has warned that several of its DGS-3130 series business network switches have security flaws with no fix available yet. The company has shared temporary protections while it works on new firmware.
A switch is the box that connects computers and other devices inside an office network. The DGS-3130 series is built mainly for small and mid-size businesses. Researcher Giresh Kumar Enugu of Spectrum Community Solutions found the bugs in the D-Link Discovery Protocol (DDP), a feature of these switches.
An attacker who already has access to the network could pull sensitive device data, change settings or credentials, leak SNMP community strings, or cause outages and resets. SNMP community strings work like shared passwords for network management tools.
The confirmed problems are in several firmware versions of the DGS-3130-30TS model. D-Link is still checking other switch models and parts of the firmware's security design. If your business does not use these switches, there is nothing to do here.
The alert box above lists the steps. The first is to turn off DDP, which D-Link calls the main known way in. The others limit who can reach the switch and help spot trouble early.
Several things are not yet known. D-Link has not shared technical details, has not published tracking numbers (CVE IDs) for the flaws, and has not said when the fix will arrive. Watch D-Link's notices for new firmware. In September, D-Link also warned of a separate unpatched flaw in older DIR-822A routers.
If your business runs D-Link DGS-3130 switches, turn off DDP and lock down management access now, then watch for D-Link's firmware fix.
The Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone numberFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
