Router

D-Link DIR-835

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
A1
Get OpenWrt firmware Release listed · 25.12.6
A1
Get firmware Release listed · 25.12.5
A1
Open hardware record Release listed · 25.12.5

Recorded configuration: 16 MB flash; 128 MB RAM

First installation
GUI OEM; D-Link Recovery GUI
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dir-835 a1 — device documentation (github.com)D-Link DIR-835 rev A1 — TechInfoDepot (github.com)D-Link DIR-835 rev A1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
A1

OpenWrt · A1

OpenWrt · A1 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, D-Link Recovery GUI
Recovery routes recorded
D-Link Recovery GUI
Availability recorded by source
Discontinued 2016

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

Listed in CISA KEV ↗CVSS 9.8 (v3.1)

D-Link DIR-835

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565

CVE-2019-16920

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.

CVE-2019-16920 record (medium.com) ↗VU#766427 — D-Link DIR-835 (kb.cert.org) ↗
Check more security advisories for this device · CVE.org