Threat video1:00
D-Link DGS-3130 DDP Zero-Days: Detection & IOCs
D-Link's DGS-3130 switches expose unpatched DDP flaws to network attackers: 9 detection rules, 9 IOCs and 8 ATT&CK techniques, plus a free Splunk SPL rule.
Read the full threat intel for D-Link DGS-3130 DDP Zero-Days: Detection & IOCs →
Chapters
- 0:00The hookFlaw: 9 detection rules.
- 0:05The storyNo CVSS scores have been published.
- 0:12Attack pathUse default SNMP communities.
- 0:25AttributionNo threat actor: this was defensive research.
- 0:30Indicators of compromiseNo malicious indicators were published.
- 0:36MITRE ATT&CK techniques8 ATT&CK techniques, from initial access to impact.
- 0:41Remediation3 steps now: Disable DDP with 'no ddp' in global and interface configuration.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Flaw: 9 detection rules.
0:05No CVSS scores have been published.
0:08The advisory groups the issues into two categories.
0:13Use default SNMP communities.
0:25No threat actor: this was defensive research.
0:30No malicious indicators were published.
0:378 ATT&CK techniques, from initial access to impact.
0:423 steps now: Disable DDP with 'no ddp' in global and interface configuration.
0:509 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.