What is the CVSS score of CVE-2024-57376?

CVE-2024-57376 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 54.3%.

Which versions of Dsr 150 Firmware are affected by CVE-2024-57376?

CVE-2024-57376 presents significant security risk, a buffer overflow vulnerability rated CVSS 8.8.

How to fix or mitigate CVE-2024-57376?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Dsr 150 Firmware CVE-2024-57376

HIGH

Classic Buffer Overflow (CWE-120)

2025-01-28 cve@mitre.org

D-Link Buffer Overflow RCE Dsr 150 Firmware Dsr 150N Firmware Dsr 250 Firmware Dsr 250N Firmware Dsr 500 Firmware Dsr 1000N Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:06 vuln.today

CVE Published

Jan 28, 2025 - 22:15 nvd

HIGH 8.8

DescriptionCVE.org

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.

AnalysisAI

D-Link DSR series business routers (DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N) with firmware 3.13 through 3.17B901C contain a buffer overflow that allows unauthenticated remote code execution. The entire DSR business router product line is affected.

Technical ContextAI

A buffer overflow vulnerability in the web management interface affects the entire DSR product range. Unauthenticated remote attackers can exploit this to execute arbitrary code on the router. The DSR series are VPN routers designed for small-to-medium businesses, handling site-to-site and remote access VPN connections.

RemediationAI

Update firmware beyond 3.17B901C. Restrict management interface access to trusted networks. Rotate VPN credentials. Monitor for unauthorized VPN connections. Consider replacing with actively maintained VPN routers.