A potentially dangerous bug affects some D-Link routers that are no longer supported by the manufacturer. The advice: buy a new router.

Some D-Link routers are vulnerable to an error, the manufacturer said in a statement. Many details about the error are not known: a CVE label has not even been assigned. The vulnerability that “allows unauthenticated users to execute code” is all D-Link wants to eliminate at this point.

The manufacturer then also provides a list of other routers that are susceptible to the error. Five of the six models at risk are only sold in the USA. Only the DSR-1000N model is available elsewhere. If you still use this router, you should take a closer look: D-Link no longer supports this model since October 2015.

end of life

This is where the problem immediately comes into play. The vulnerable router models are all EOL (end of life)which means customers should not expect a patch. D-Link makes it clear that no exception is possible, no matter how harmful the error may be. “D-Link may not provide support for these EOL products“, is the message.

D-Link’s only advice is to buy a new, still supported router. The manufacturer is even ready to offer discounts of up to twenty percent to incentivize customers with outdated routers who are not comfortable with the risk of a hacker attack. This discount is valid in the United States only. Customers outside the US are asked to contact their local dealer.

Until the new router is delivered, D-Link requires you to regularly update the router password and activate WLAN encryption. This incident is a prime example of the risks associated with using outdated hardware against all advice. Whatever your brand, once a manufacturer no longer wants to support a particular product, you use it at your own risk.