CVE-2024-57376

HIGH
2025-01-28 [email protected]
8.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 18:06 vuln.today
CVE Published
Jan 28, 2025 - 22:15 nvd
HIGH 8.8

Tags

D-Link Buffer Overflow RCE Dsr 150 Firmware Dsr 150N Firmware Dsr 250 Firmware Dsr 250N Firmware Dsr 500 Firmware Dsr 1000N Firmware

Description

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.

Analysis

D-Link DSR series business routers (DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N) with firmware 3.13 through 3.17B901C contain a buffer overflow that allows unauthenticated remote code execution. The entire DSR business router product line is affected.

Technical Context

A buffer overflow vulnerability in the web management interface affects the entire DSR product range. Unauthenticated remote attackers can exploit this to execute arbitrary code on the router. The DSR series are VPN routers designed for small-to-medium businesses, handling site-to-site and remote access VPN connections.

Affected Products

['D-Link DSR-150', 'D-Link DSR-150N', 'D-Link DSR-250', 'D-Link DSR-250N', 'D-Link DSR-500N', 'D-Link DSR-1000N', 'Firmware 3.13 through 3.17B901C']

Remediation

Update firmware beyond 3.17B901C. Restrict management interface access to trusted networks. Rotate VPN credentials. Monitor for unauthorized VPN connections. Consider replacing with actively maintained VPN routers.

Priority Score

98
Low Medium High Critical
KEV: 0
EPSS: +54.3
CVSS: +44
POC: 0

Share

CVE-2024-57376 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy