CVE-2006-3687: Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadban...

Security readout for executives and security teams

This is an old D-Link router vulnerability in the UPnP service. A specially long discovery request to UDP port 1900 could overflow memory and may let an attacker run code on the device. The main business risk is unmanaged legacy routers still present in offices, labs, or small sites. Exposure is most likely where affected legacy D-Link routers remain deployed with UPnP enabled or UDP/1900 reachable from untrusted networks. The bundle names specific models, but does not identify firmware ranges or default configurations. Treat as a legacy-device exposure cleanup item with high impact if found. Prioritize discovery and removal of affected routers, especially at network edges or sites with weak asset governance. Mitigation focus: Inventory for the listed D-Link DI, WBR, and EBR router models.; Disable UPnP where it is not operationally required.; Block UDP/1900 from untrusted networks and the Internet..

Prepared

Jun 29, 2026, 11:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.