Deviceways

Router

D-Link DIR-806A

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

HardwareB1; B1 / C1

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
B1
Release listed · 25.12.5
B1 / C1
Release listed · 25.12.6
B1 / C1
Release listed · 25.12.5
Open hardware recordopenwrt.org
Original project github.com

B1 / C1

First installation
GUI OEM; U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dir-806a b1 — device documentation (github.com)

Hardware revision
B1

Device details

D-Link DIR-806A rev A1 — WikiDevi (github.com)

Hardware revision
A1

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
B1 / C1

OpenWrt · B1 / C1

OpenWrt · B1 / C1 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot TFTP + serial recovery
Recovery routes recorded
U-Boot TFTP + serial recovery

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 5.3 (v4.0)

DIR-806A

D-Link DIR-806A SSDP Request ssdpcgi_main command injection

CVE-2025-15391

Affected firmware
100CNb11
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A weakness has been identified in D-Link DIR-806A 100CNb11. Affected is the function ssdpcgi_main of the component SSDP Request Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-339152 | D-Link DIR-806A SSDP Request ssdpcgi_main command injection — DIR-806A (vuldb.com) ↗VDB-339152 | CTI Indicators (IOB, IOC, TTP, IOA) — DIR-806A (vuldb.com) ↗Submit #727637 | D-Link DIR-806A DIR806A1_FW100CNb11.bin Command Injection — DIR-806A (vuldb.com) ↗
CVE published

CVSS 5.3 (v3.1)

DIR-806A

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

CVE-2024-0717

Affected firmware
20240112
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

Check more security advisories for this device · CVE.org