Deviceways

Router

D-Link DAP-2695

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
A1
Get OpenWrt firmware Release listed · 25.12.6
A1
Get firmware Release listed · 25.12.5
A1
Open hardware record Release listed · 25.12.5
Original project github.com
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dap-2695 a1 — device documentation (github.com)D-Link DAP-2695 rev A1 — TechInfoDepot (github.com)D-Link DAP-2695 rev A1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
A1

OpenWrt · A1

OpenWrt · A1 — Source documentation (openwrt.org)

Availability recorded by source
Discontinued

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 7.5 (v4.0)

DAP-2695

D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification

CVE-2025-12295

Affected firmware
2.00RC13
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-329963 | D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification — DAP-2695 (vuldb.com) ↗VDB-329963 | CTI Indicators (IOB, IOC, IOA) — DAP-2695 (vuldb.com) ↗Submit #675854 | DLink DAP-2695 v2.00RC131 CWE-20 Improper Input Validation — DAP-2695 (vuldb.com) ↗
CVE published

CVSS 7.5 (v3.1)

D-Link DAP-2695

D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier,…

CVE-2022-38873

Affected firmware
DAP-2695: v1.20rc119_beta31 and earlier
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

D-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2.10rc050 and earlier, DAP-2553 v3.10rc031 and earlier, DAP-2660 v1.15rc093 and earlier, DAP-2690 v3.20rc106 and earlier, DAP-2695 v1.20rc119_beta31 and earlier, DAP-3320 v1.05rc027 beta and earlier, DAP-3662 v1.05rc047 and earlier allows attackers to cause a Denial of Service (DoS) via uploading a crafted firmware after modifying the firmware header.

CVE published

CVSS 6.1 (v3.1)

D-Link DAP-2695

Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 allows a remote attacker to…

CVE-2024-28436

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 allows a remote attacker to execute arbitrary code via the reload parameter in the session_login.php component.

CVE-2024-28436 record (djallalakira.medium.com) ↗
CVE published

CVSS 5.1 (v4.0)

DAP-2695

D-Link DAP-2695 Firmware Update sub_4174B0 os command injection

CVE-2025-12296

Affected firmware
2.00RC13
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-329964 | D-Link DAP-2695 Firmware Update sub_4174B0 os command injection — DAP-2695 (vuldb.com) ↗VDB-329964 | CTI Indicators (IOB, IOC, TTP, IOA) — DAP-2695 (vuldb.com) ↗Submit #675855 | DLink DAP-2695 v2.00RC131 CWE-78 Improper Neutralization of Special Elements used in an OS — DAP-2695 (vuldb.com) ↗
CVE published

CVSS 5.1 (v4.0)

DAP-2695

D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection

CVE-2025-11665

Affected firmware
2.00RC131
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdater_main of the file rgbin of the component Firmware Update Handler. Performing manipulation results in os command injection. The attack may be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-328084 | D-Link DAP-2695 Firmware Update rgbin fwupdater_main os command injection — DAP-2695 (vuldb.com) ↗VDB-328084 | CTI Indicators (IOB, IOC, TTP, IOA) — DAP-2695 (vuldb.com) ↗Submit #673104 | DLink DAP-2695 v2.00RC131 CWE88 Improper Neutralization of Argument Delimiters in Command — DAP-2695 (vuldb.com) ↗
Check more security advisories for this device · CVE.org