CVE-2020-13960 : What You Need to Know

D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have a vulnerability that allows remote attackers to provide valid DNS responses by manipulating the DNS resolver search path.

Understanding CVE-2020-13960

This CVE identifies a security issue in specific D-Link devices that can be exploited by attackers to offer Internet services by registering a subdomain of the domain.name domain name.

What is CVE-2020-13960?

The vulnerability in D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices enables attackers to manipulate DNS responses, potentially leading to unauthorized access to Internet services.

The Impact of CVE-2020-13960

Remote attackers can provide valid DNS responses and offer Internet services by exploiting the default DNS resolver search path in the affected devices.

Technical Details of CVE-2020-13960

This section provides detailed technical information about the vulnerability.

Vulnerability Description

The vulnerability allows attackers to manipulate DNS responses by leveraging the domain.name string in the DNS resolver search path of the affected devices.

Affected Systems and Versions

D-Link DSL 2730-U IN_1.10 and IN_1.11
DIR-600M 3.04

Exploitation Mechanism

Attackers can register a subdomain of the domain.name domain name to provide valid DNS responses and potentially offer Internet services.

Mitigation and Prevention

Protecting systems from CVE-2020-13960 requires immediate actions and long-term security practices.

Immediate Steps to Take

Disable remote administration if not required.
Implement strong firewall rules to restrict unauthorized access.
Regularly monitor DNS traffic for any suspicious activities.

Long-Term Security Practices

Keep devices up to date with the latest firmware releases.
Conduct regular security audits and penetration testing to identify vulnerabilities.
Educate users on safe browsing practices and the importance of DNS security.

Patching and Updates

Apply patches and updates provided by D-Link to address the vulnerability and enhance device security.