Deviceways

Wireless access point

D-Link DAP-1522

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

HardwareA1; A1 · Ralink RT2880F; A1 · Ralink RT2880

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
A1 · Ralink RT2880F
A1; A1 · Ralink RT2880
Open hardware recordopenwrt.org
Original project github.com

A1 · Ralink RT2880

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dap-1522 a1 — device documentation (github.com)D-Link DAP-1522 rev A1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
A1

Device details

D-Link DAP-1522 rev A1 — TechInfoDepot (github.com)

Hardware revision
A1

Device details

D-Link DAP-1522 rev B1 — TechInfoDepot (github.com)

Hardware revision
B1

Device details

D-Link DAP-1522 rev B1 — WikiDevi (github.com)

Hardware revision
B1

OpenWrt · A1 · Ralink RT2880

OpenWrt · A1 · Ralink RT2880 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

D-Link DAP-1522

An authentication-bypass issue was discovered on D-Link DAP-1522 devices 1.4x before 1.10b04Beta02

CVE-2020-15896

Affected firmware
Version details in source scope
Fix
DAP-1520 (EOS: 03/08/2019) / DAP-1522 (EOS: 07/01/2016) / DIR-816L (EOS: 03/01/2016) have reached its End-of-Support ("EOS") / End-of-Life ("EOL") Date.
Read mitre CVE record
Details and sourcesManufacturer fix — D-Link DAP-1522 ↗
CVE updated

An authentication-bypass issue was discovered on D-Link DAP-1522 devices 1.4x before 1.10b04Beta02. There exist a few pages that are directly accessible by any unauthorized user, e.g., logout.php and login.php. This occurs because of checking the value of NO_NEED_AUTH. If the value of NO_NEED_AUTH is 1, the user has direct access to the webpage without any authentication. By appending a query string NO_NEED_AUTH with the value of 1 to any protected URL, any unauthorized user can access the application directly, as demonstrated by bsc_lan.php?NO_NEED_AUTH=1.

Check more security advisories for this device · CVE.org