PT-2025-3435 · D Link · Dsr-150+4

Published 2024-11-18 · Updated 2025-07-01 · CVE-2024-57376

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DSR-150 versions 3.13 through 3.17B901C D-Link DSR-150N versions 3.13 through 3.17B901C D-Link DSR-250 versions 3.13 through 3.17B901C D-Link DSR-250N versions 3.13 through 3.17B901C D-Link DSR-500N versions 3.13 through 3.17B901C D-Link DSR-1000N versions 3.13 through 3.17B901C

Description The issue allows unauthenticated users to execute remote code. This is due to a buffer overflow vulnerability.

Recommendations For D-Link DSR-150 versions 3.13 through 3.17B901C, consider disabling remote access until a patch is available. For D-Link DSR-150N versions 3.13 through 3.17B901C, consider disabling remote access until a patch is available. For D-Link DSR-250 versions 3.13 through 3.17B901C, consider disabling remote access until a patch is available. For D-Link DSR-250N versions 3.13 through 3.17B901C, consider disabling remote access until a patch is available. For D-Link DSR-500N versions 3.13 through 3.17B901C, consider disabling remote access until a patch is available. For D-Link DSR-1000N versions 3.13 through 3.17B901C, consider disabling remote access until a patch is available.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2025-01853

CVE-2024-57376

Affected Products

Dsr-1000N

Dsr-150

Dsr-250

Dsr-250N

Dsr-500N

References · 17

• https://osv.dev/vulnerability/CVE-2024-57376 · Vendor Advisory
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01853 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57376 · Security Note
• https://twitter.com/TweetThreatNews/status/1886491456627478947 · Twitter Post
• https://twitter.com/Komodosec/status/1889706667752948220 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1884392583821987850 · Twitter Post
• https://t.me/cvedetector/16655 · Telegram Post
• https://t.me/pentestingnews/55997 · Telegram Post
• https://t.me/cvenotify/127247 · Telegram Post
• https://vuldb.com/?id.293971 · Note
• https://twitter.com/fridaysecurity/status/1886235998520062346 · Twitter Post
• https://twitter.com/fletch_ai/status/1886640935746048123 · Twitter Post
• https://securityonline.info/cve-2024-57376-end-of-life-d-link-routers-vulnerable-to-unauthenticated-rce · Note
• https://twitter.com/Brandefense/status/1887033511124853169 · Twitter Post