D-Link has identified a critical vulnerability in a group of its routers that could allow attackers to run arbitrary code remotely. The company has stated that there will be no patches or replacements offered for these affected devices, which have already been discontinued and are no longer in active production.
The models DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, and DSR-1000N are confirmed to be susceptible because corrective firmware will not be released for them. This security gap means owners of these devices remain at risk even though the hardware is no longer supported.
For users, the implications are serious: potential data leaks, the possibility of malware being installed on connected devices, and Denial of Service attacks that can disrupt network operations. These outcomes underscore why continued use of retired hardware often comes with heightened risk.
A large share of the vulnerable units were sold in Russia, where the DSR-250N once appeared in the market at around 22 thousand rubles. In addition, most of the listed models were once available through offline retail channels, making legacy units widespread in certain regions.
Details on the number of routers sold in Russia are not disclosed. Nevertheless, the maker is offering new units with active support at the full price in Russia and in almost all other markets where the brand operates. In the United States, customers can access a 20 percent discount on the newer DSR-250v2 model to facilitate an upgrade to supported hardware.
Earlier reports noted that a drop in internet speed could indicate unauthorized users connecting to the Wi-Fi network, highlighting the practical signs that may accompany a vulnerable device. This situation emphasizes the importance of moving to supported equipment and adopting safer network practices whenever possible.