A Vulnerability in D-Link Routers: Why Aging Network Gear Must Be Replaced
Originally published in Hebrew, 2024.
Internet access has become an inseparable part of our lives, and with it the challenge of protecting home and business networks against threats such as viruses, break-ins and data theft. It was recently published that several router models from D-Link suffer from a severe vulnerability (a security flaw named CVE-2020-25757) that allows attackers to run code remotely, without the router requiring the attacker to authenticate - that is, without a password. The vulnerability, which affects popular D-Link models such as the DSR-150 and DSR-250 as well as other models, sharpens the need to use modern, up-to-date network equipment.
What is the problem, exactly?
In simple terms, this is a security hole that allows attackers to connect to the router remotely, take control of it and use it for various malicious purposes, such as stealing data, connecting to and taking over other devices on the network attached to it, or even taking down the entire network - a denial-of-service attack. The flaw is classified as a "critical" vulnerability, meaning one where the risk that someone will exploit it and try to use it to attack such a device is especially high.
Why does D-Link have no fix for the vulnerability?
The models in which the vulnerability was discovered are old models, most of which have reached "End of Service" status as defined by the manufacturer - a status meaning these devices are no longer supported by the company, which has stopped manufacturing and selling them and no longer provides service for them. The meaning is that D-Link will not provide updates or fixes for this vulnerability, which means this equipment will remain vulnerable, even if its users are not currently experiencing any problems. On models that have not yet reached "End of Service" status, an update should be performed as soon as possible.
Affected EOL models (no longer manufactured or supported):
- DSR-150
- DSR-150N
- DSR-250
- DSR-250N
Other models that may be affected (their firmware should be updated):
- DSR-500
- DSR-500N
- DSR-1000
- DSR-1000N
- DSR-1000AC
The recommended solution: buying new network equipment
If you happen to be using one of these D-Link models, it is very important to replace them with new, up-to-date equipment that is supported, receives updates and lets you get service for it from the manufacturer, as well as firmware updates that improve performance and security. Even though old network equipment may look as if it is working properly, if it has reached "End of Service" status and no longer receives support or updates from the manufacturer, it exposes the network attached to it to unnecessary risks. Buying and installing modern equipment that is supported on an ongoing basis can improve network performance, and above all improve your network's information security and reduce the chance that break-in attempts succeed.
Further readingYour ISP's Router or a Managed Firewall? Equipment Alone Is Not EnoughFive things that stay exposed even with good equipment, why the real problem is rarely the hardware, and three checks any business owner can run today - no admin screens needed.How to choose new network equipment?
When looking for a new router, it is worth paying attention to a few points:
- Support for updates and security updates: make sure the manufacturer provides regular updates.
- Advanced features: look for routers with VPN support, a built-in firewall and a remote-management option.
- Information security: it is recommended to use devices that can detect break-in attempts and even prevent them.
- Fit for your needs: a router for a small business is different from one intended for a home. Choose equipment that matches your type of use.
In summary
Certain models of D-Link routers are no longer safe to use, and you should act promptly to replace them. If some of your network devices include models in which the vulnerability was identified, do not ignore the problem. Buying new equipment will raise the security level of the network and provide a long-term answer on updates and performance.
Not sure what is sitting at the edge of your network?
If you do not know which router or firewall your business runs on, whether it is still supported, or when it last received an update, it is worth a short call. We will check what is installed, what is updated and what needs replacing - no strings attached. You can also read about our networking services.