Deviceways

Wi Fi extender

D-Link DAP-1620

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

HardwareB1

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.

Release listed · 25.12.6

Get OpenWrt firmwarefirmware-selector.openwrt.org
Original project github.com
First installation
U-Boot web recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
B1

OpenWrt · B1

OpenWrt · B1 — Source documentation (openwrt.org)

Installation routes recorded
U-Boot web recovery
Recovery routes recorded
U-Boot web recovery
Availability recorded by source
Available 2024

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 9.3 (v4.0)

DAP-1620

D-Link DAP-1620 storage check_dws_cookie stack-based overflow

CVE-2025-2621

Affected firmware
1.03
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. The manipulation of the argument uid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-300623 | D-Link DAP-1620 storage check_dws_cookie stack-based overflow — DAP-1620 (vuldb.com) ↗VDB-300623 | CTI Indicators (IOB, IOC, IOA) — DAP-1620 (vuldb.com) ↗Submit #518980 | D-Link DAP-1620 1.03 Buffer Overflow — DAP-1620 (vuldb.com) ↗
CVE published

CVSS 9.3 (v4.0)

DAP-1620

D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow

CVE-2025-2620

Affected firmware
1.03
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-300622 | D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow — DAP-1620 (vuldb.com) ↗VDB-300622 | CTI Indicators (IOB, IOC, IOA) — DAP-1620 (vuldb.com) ↗Submit #518969 | D-Link DAP-1620 1.03 Buffer Overflow — DAP-1620 (vuldb.com) ↗
CVE published

CVSS 9.3 (v4.0)

DAP-1620

D-Link DAP-1620 Cookie storage check_dws_cookie stack-based overflow

CVE-2025-2619

Affected firmware
1.03
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability, which was classified as critical, was found in D-Link DAP-1620 1.03. This affects the function check_dws_cookie of the file /storage of the component Cookie Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-300621 | D-Link DAP-1620 Cookie storage check_dws_cookie stack-based overflow — DAP-1620 (vuldb.com) ↗VDB-300621 | CTI Indicators (IOB, IOC, IOA) — DAP-1620 (vuldb.com) ↗Submit #518968 | D-Link DAP-1620 1.03 Buffer Overflow — DAP-1620 (vuldb.com) ↗
CVE published

CVSS 9.3 (v4.0)

DAP-1620

D-Link DAP-1620 Path api set_ws_action heap-based overflow

CVE-2025-2618

Affected firmware
1.03
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function set_ws_action of the file /dws/api/ of the component Path Handler. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-300620 | D-Link DAP-1620 Path api set_ws_action heap-based overflow — DAP-1620 (vuldb.com) ↗VDB-300620 | CTI Indicators (IOB, IOC, IOA) — DAP-1620 (vuldb.com) ↗Submit #518963 | D-Link DAP-1620 1.03 Buffer Overflow — DAP-1620 (vuldb.com) ↗
CVE published

D-Link DAP-1620

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].

CVE-2021-46381

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].

Check more security advisories for this device · CVE.org