CVE-2020-13960

D-Link DSL 2730-U IN1.10 and IN1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses and also offer Internet services such as HTTP for names that otherwise would have had an NXDOMAIN erro...

CVE-2020-13960

CVE-2020-13960 affects D-Link DSL 2730-U (IN_1.10, IN_1.11) and DIR-600M (3.04). The issue is that the DNS resolver search path includes the domain.name string by default, enabling a remote attacker to supply valid DNS responses for names that would normally NXDOMAIN, potentially enabling service...