CVE-2020-13960
Last modified
CVE-2020-13960 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name.. EPSS estimates a 1.19% chance of exploitation in the next 30 days.
Description
D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dsl-2730u Firmware | in_1.10 |
| Dlink | Dir-600m Firmware | 3.04 |
References
- https://harigovind.org/articles/who-is-hijacking-my-nxdomains/Exploit, Third Party Advisory
- https://harigovind.org/articles/who-is-hijacking-my-nxdomains/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-13960?
How severe is CVE-2020-13960?
How do I fix CVE-2020-13960?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-13955HttpUtils#getURLConnection method disables explicitly hostna…5.9
- CVE-2020-13956Apache HttpClient versions prior to version 4.5.13 and 5.0.3…5.3
- CVE-2020-13957Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.…9.8
- CVE-2020-13958A vulnerability in Apache OpenOffice scripting events allows…7.8
- CVE-2020-13959The default error page for VelocityView in Apache Velocity T…6.1
- CVE-2020-1396An elevation of privilege vulnerability exists when Windows …7.8
- CVE-2020-13961Strapi before 3.0.2 could allow a remote authenticated attac…6.5
- CVE-2020-13962Qt 5.12.2 through 5.14.2, as used in unofficial builds of Mu…7.5
- CVE-2020-13963SOPlanning before 1.47 has Incorrect Access Control because …9.8
- CVE-2020-13964An issue was discovered in Roundcube Webmail before 1.3.12 a…6.1
- CVE-2020-13965An issue was discovered in Roundcube Webmail before 1.3.12 a…6.1
- CVE-2020-13968CRK Business Platform <= 2019.1 allows can inject SQL statem…9.8
Are you affected by CVE-2020-13960?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST