Deviceways

Router

D-Link DIR-300

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
B1 · Ralink RT3050
Open hardware record
B7 · Ralink RT5350
Open hardware record
A1 · Atheros AR2317 Wi-Fi
Retired support documentedOpen device guide
B1 / B2 / B3 · Ralink RT3050F Wi-Fi; B5 / B6 / B7 · Ralink RT5350 Wi-Fi
Retired support documentedOpen device guide
A1; A1 · Atheros AR2317
Open hardware record
B1,B2,B3
Open hardware record
B5,B6,B7
Open hardware record
Original project github.com

A1 · Atheros AR2317 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.

B1 / B2 / B3 · Ralink RT3050F Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
GUI OEM; D-Link Recovery GUI

B5 / B6 / B7 · Ralink RT5350 Wi-Fi

Device support in source
Retired; check the documented hardware and older release resources.
First installation
SD card
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dir-300 a1 — device documentation (github.com)D-Link DIR-300 rev A1 — TechInfoDepot (github.com)D-Link DIR-300 rev A1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
A1

Device details

d-link dir-300 b1 — device documentation (github.com)

Hardware revision
B1,B2,B3

Device details

d-link dir-300 b5 b6 b7 — device documentation (github.com)

Hardware revision
B5,B6,B7

Device details

D-Link DIR-300 rev B1 — TechInfoDepot (github.com)

Hardware revision
B1

Device details

D-Link DIR-300 rev C1 — TechInfoDepot (github.com)

Hardware revision
C1

Device details

D-Link DIR-300 rev D1 — TechInfoDepot (github.com)

Hardware revision
D1

Device details

D-Link DIR-300-NRU rev B7 — TechInfoDepot (github.com)

Hardware revision
B7

Device details

D-Link DIR-300S rev A1 — TechInfoDepot (github.com)

Hardware revision
A1

Device details

D-Link DIR-300 rev B1 — WikiDevi (github.com)

Hardware revision
B1

Device details

D-Link DIR-300 rev C1 — WikiDevi (github.com)

Hardware revision
C1

Device details

D-Link DIR-300 rev D1 — WikiDevi (github.com)

Hardware revision
D1

Device details

D-Link DIR-300-NRU rev B7 — WikiDevi (github.com)

Hardware revision
NRU/B7

Device details

D-Link DIR-300S rev A1 — WikiDevi (github.com)

Hardware revision
S A1

OpenWrt · A1 · Atheros AR2317 Wi-Fi

OpenWrt · A1 · Atheros AR2317 Wi-Fi — Source documentation (openwrt.org)

Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
B1 / B2 / B3

OpenWrt · B1 / B2 / B3 · Ralink RT3050F Wi-Fi

OpenWrt · B1 / B2 / B3 · Ralink RT3050F Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, D-Link Recovery GUI
Recovery routes recorded
D-Link Recovery GUI
Availability recorded by source
Discontinued 2012

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
B5 / B6 / B7

OpenWrt · B5 / B6 / B7 · Ralink RT5350 Wi-Fi

OpenWrt · B5 / B6 / B7 · Ralink RT5350 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
SD card
Recovery routes recorded
D-Link Recovery GUI
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 5.7 (v3.1)

D-Link DIR-300

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

CVE-2011-4723

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

CVE published

CVSS 10.0 (v4.0)

DIR-300 rev B

D-Link Devices Unauthenticated RCE

CVE-2013-10069

Affected firmware
Through 2.13
Fix
Fix details in the linked record
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.

Security advisory dlink devices unauth rce — DIR-300 rev B (vulncheck.com) ↗
CVE published

CVSS 9.8 (v3.1)

D-Link DIR-300

D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.

CVE-2023-31814

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.

CVE published

CVSS 9.3 (v4.0)

DIR-300

D-Link Devices command.php Unauthenticated RCE

CVE-2013-10048

Affected firmware
Through 2.13
Fix
Fix details in the linked record
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker can execute arbitrary shell commands with root privileges, allowing full takeover of the device. This includes launching services such as Telnet, exfiltrating credentials, modifying system configuration, and disrupting availability. The flaw stems from the lack of authentication and inadequate sanitation of the cmd parameter.

Security advisory d link legacy unauth rce — DIR-300 (vulncheck.com) ↗
Check more security advisories for this device · CVE.org