D-Link recently discovered that two of its code signing certificates were misappropriated. Upon discovery, we immediately decommissioned the certificates and investigated the issue. Like several other companies in Asia, D-Link was victimized by a highly active cyber espionage group which has been using PLEAD Malware to steal confidential information from companies and organizations based in East Asia, particularly in Taiwan, Japan, and Hong Kong. The two affected D-Link certificates were revoked, effective July 3rd, 2018.
Click here for questions and answers about this issue
Click here for more information and a temporary workaround
Affected Products:
DCS-930L - Rev A - No update will be available
DCS-930L - Rev B - Download Firmware (7/24/18)
DCS-931L - Rev A - Download Firmware (6/17/19)
DCS-932L - Rev A - No update will be available
DCS-932L - Rev B - Download Firmware (7/24/18)
DCS-933L - Rev A - Download Firmware (6/17/19)
DCS-934L - Rev A - Download Firmware (6/17/19)
DCS-935L (US version) - Rev A1
DCS-960L - Rev A
DCS-5000L (non-US) - Rev A - Download Firmware (7/31/18)
DCS-5009L - Rev A - Download Firmware (12/19/18)
DCS-5010L - Rev A - Download Firmware (12/20/18)
DCS-5020L - Rev A - Download Firmware (7/25/18)
DCS-5025L - Rev A - Download Firmware (6/13/19)
DCS-5030L - Rev A - Download Firmware (10/31/18)
DCS-6004L - Rev A2 - Download Firmware (8/12/19)
DCS-6005L - Rev A1
DCS-6045L - Rev A
DNR-202L - Rev A - Download Firmware (2/22/19)
DNR-312L - Rev A - Download Firmware (8/14/18)
DNR-322L - Rev A - Download Firmware (3/5/19)
DNR-322L - Rev B
DNR-2020-04P (non-US) - Rev A - Download Firmware (7/31/18)
DNR-326 - Rev A - Download Firmware (3/5/19)
Q: What is the function of a code signing certificate?
A: When customers go to a physical reputable store to buy a product, based on the inspection of the packaging of the product, they know who manufactured the product and whether the package has been opened. Similarly, when customers obtain software programs on-line, a program signed with a code signing certificate issued through a trusted third-party certification company indicates to the customers that the programs are legitimate, genuine, and have not been modified.
Q: Why did D-Link revoke the certificates?
A: D-Link recently discovered that two of its code signing certificates were misappropriated. Upon this discovery, we investigated the issue including immediately contacting our third-party certification company to revoke the two affected D-Link certificates on July 3rd, 2018 to prevent any further misuse. That is, after the date of revocation, any programs signed with either of the revoked certificates are illegally using the revoked certficate and are no longer valid. Accordingly, Windows operating system’s automatic security mechanism will prohibit the execution of such illegal software.
Q: Do D-Link software have viruses or security vulnerabilities?
A: No, this issue pertains to the certificate being misappropriated by an unauthorized user, and does not concern D-Link software being infected with a virus or compromised due to security vulnerabilities.
Q: Does the revocation of the D-Link certificates affect customers using D-Link software? Do I need to update my software?
A: Affected D-Link software is limited to D-Link's Java web applications that were created with the revoked certificate. An affected application will report that it's certificate has been revoked and will not run the application in both Microsoft Windows or Apple OSx/macOS operating systems. These revoked certificates will not affect the use of the mydlink mobile applications. We will be updating the affected Java web application which will require users to install this new application.