How severe is CVE-2020-13960?

CVE-2020-13960 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.

Is CVE-2020-13960 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-13960?

CVE-2020-13960 primarily affects Dlink Dsl-2730u Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2020-13960?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2020-13960 published?

CVE-2020-13960 was published on 2020-06-08 and last updated on 2026-06-17.

CVE-2020-13960

CVE-2020-13960 is a high-severity vulnerability in Dlink Dsl-2730u Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v2: 5.0
EPSS exploit prediction: 1% (64th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Dlink Dsl-2730u Firmware
Published: 2020-06-08
Last modified: 2026-06-17

Description

D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name.

Frequently asked questions

What is CVE-2020-13960?: D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name.
How severe is CVE-2020-13960?: CVE-2020-13960 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2020-13960 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (64th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-13960?: CVE-2020-13960 primarily affects Dlink Dsl-2730u Firmware. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2020-13960?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2020-13960 published?: CVE-2020-13960 was published on 2020-06-08 and last updated on 2026-06-17.

References

https://harigovind.org/articles/who-is-hijacking-my-nxdomains/

Affected products (2)

cpe:2.3:o:dlink:dsl-2730u_firmware:in_1.10:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-600m_firmware:3.04:*:*:*:*:*:*:*

More vulnerabilities in Dlink Dsl-2730u Firmware

CVE-2017-6411 — High (CVSS 8.8): Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or…
CVE-2023-46033 — Medium (CVSS 6.8): D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control.…

All CVEs affecting Dlink Dsl-2730u Firmware →