D-Link has decided not to fix a vulnerability in a number of its older router models, including the DSR-150, DSR-250, and DSR-1000N. These devices were sold and are still available in Russia. As a result, users are at risk of remote attacks, including data theft and installation of malware, since the vulnerability allows attackers to run arbitrary code via a buffer overflow. The only solution, according to the company, is to buy a new device.
Despite the end of support, some models can still be found for sale on major marketplaces. D-Link does not offer Russian users any discounts on the purchase of new routers, although in the US, buyers of similar devices can count on a 20 percent reduction in cost when replacing outdated routers. This attitude towards users raises questions and discontent, especially among those who recently purchased these devices.
The situation is especially dangerous because the routers themselves continue to be used in networks, which means they remain vulnerable to attackers. Many Russians who bought these models found themselves hostages to the situation, because the company is not ready to provide them with even minimal protection. D-Link also does not share detailed information about specific threats, apparently trying to prevent abuse of the vulnerability, but this only adds to the anxiety among users.
This is not the first time D-Link has refused to patch vulnerabilities in its equipment. Just two weeks ago, the company also failed to fix a critical flaw in network storage units sold worldwide. Clearly, users of older D-Link devices should be prepared for the fact that their data protection now depends only on them.
Users of older D-Link routers should consider replacing their devices to ensure the security of their network, especially considering that the manufacturer refuses to patch vulnerabilities and does not provide discounts outside the United States.
Source
Despite the end of support, some models can still be found for sale on major marketplaces. D-Link does not offer Russian users any discounts on the purchase of new routers, although in the US, buyers of similar devices can count on a 20 percent reduction in cost when replacing outdated routers. This attitude towards users raises questions and discontent, especially among those who recently purchased these devices.
The situation is especially dangerous because the routers themselves continue to be used in networks, which means they remain vulnerable to attackers. Many Russians who bought these models found themselves hostages to the situation, because the company is not ready to provide them with even minimal protection. D-Link also does not share detailed information about specific threats, apparently trying to prevent abuse of the vulnerability, but this only adds to the anxiety among users.
This is not the first time D-Link has refused to patch vulnerabilities in its equipment. Just two weeks ago, the company also failed to fix a critical flaw in network storage units sold worldwide. Clearly, users of older D-Link devices should be prepared for the fact that their data protection now depends only on them.
Users of older D-Link routers should consider replacing their devices to ensure the security of their network, especially considering that the manufacturer refuses to patch vulnerabilities and does not provide discounts outside the United States.
Source
