CVE-2020-13960

D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote…

published June 8, 2020

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01192 · 67.8th percentile
Published
2020-06-08T19:26Z
EPSS history
Timeline
  • 08 JUN 19:26Z
    D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote…
    cvelistv5