D-Link tells users to trash old VPN routers over bug too dangerous to identify

Owners of older D-Link VPN routers are being told to retire and replace affected devices after disclosure of a critical unauthenticated remote code execution (buffer overflow) vulnerability in multiple EOL/EOS hardware revisions; D-Link will not issue patches and is offering a 20% discount on a replacement router. The advisory urges users to change management passwords and enable Wi-Fi encryption and warns that unpatched routers could enable surveillance, MITM, or lateral attacks (including ransomware deployment), although the report does not confirm active exploitation.