If you’re using an older version of D-Link’s VPN router, you may want to think twice before keeping it connected to the internet. The manufacturer has confirmed that a severe exploit has been found in several devices that are no longer officially supported. As such, if you own one, you’ll want to change it ASAP.
D-Link Sends Out a Warning to Owners of Its VPN Routers
As reported by The Register, D-Link has detected a serious flaw in its routers. This exploit allows hackers to perform remote code execution, one of the more devastating cybersecurity flaws a device can have.
Usually, D-Link would publish a patch for the affected devices and everything would be fine. However, all of the routers suffering from this problem have passed their end-of-life date, which means D-Link cannot publish a fix. As such, your best bet is to stop using the router altogether and replace it with a supported one.
Here’s a list of all the routers D-Link sent out a warning over, plus the date they lost support:
DSR-150 (EOL May 2024)
DSR-150N (EOL May 2024)
DSR-250 (EOL May 2024)
DSR-250N (EOL May 2024)
DSR-500N (EOL September 2015)
DSR-1000N (EOL October 2015)
The exploit is so severe that D-Link refuses to give details as to what it does or what part of the router it affects, in fear that malicious agents will use the knowledge to attack people’s devices.
Fortunately, D-Link is offering affected US users a 20 percent discount on a new, unaffected DSR-250v2 router, which should make the upgrade a lot more palatable. You can read about how to claim the discount on the D-Link security announcement concerning the flaw. On the other hand, if you feel that this is the right time to shop around, check out the best Wi-Fi routers of 2024.