CVE-2024-57376: Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to
53
This month
HIGH 8.8UPGRADEUPGRADEUPGRADE
CVE-2024-57376 is a high-severity flaw (CVSS 8.8) affecting dsr-150 firmware, dsr-150n firmware, dsr-250 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
Published CVE record published
Updated Record last modified
dlink dsr-150 firmware UPGRADE
Affected: >= 3.13 and <= 3.17B901C
Fixed in: newer than 3.17B901C
Safe to downgrade to: a release before 3.13
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
dlink dsr-150n firmware UPGRADE
Affected: >= 3.13 and <= 3.17B901C
Fixed in: newer than 3.17B901C
Safe to downgrade to: a release before 3.13
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
dlink dsr-250 firmware UPGRADE
Affected: >= 3.13 and <= 3.17B901C
Fixed in: newer than 3.17B901C
Safe to downgrade to: a release before 3.13
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
dlink dsr-250n firmware UPGRADE
Affected: >= 3.13 and <= 3.17B901C
Fixed in: newer than 3.17B901C
Safe to downgrade to: a release before 3.13
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
dlink dsr-500 firmware UPGRADE
Affected: >= 3.13 and <= 3.17B901C
Fixed in: newer than 3.17B901C
Safe to downgrade to: a release before 3.13
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
dlink dsr-1000n firmware UPGRADE
Affected: >= 3.13 and <= 3.17b901c
Fixed in: newer than 3.17b901c
Safe to downgrade to: a release before 3.13
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.
Verify at the official sourceNVD · CVE Program · Report a problem with this page Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-57376?
dsr-150 firmware: upgrade to newer than 3.17B901C; dsr-150n firmware: upgrade to newer than 3.17B901C; dsr-250 firmware: upgrade to newer than 3.17B901C. Exact commands for each OS are on this page.
Is CVE-2024-57376 being exploited?
CVE-2024-57376 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-57376 affect?
CVE-2024-57376 affects dsr-150 firmware, dsr-150n firmware, dsr-250 firmware. Severity is high (CVSS 8.8). Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.
PatchTheCVE