Deviceways

Router

D-Link DIR-842

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
C1 · Qualcomm Atheros QCA9888 Wi-Fi
Processor: Qualcomm Atheros QCA9563Open hardware record Release listed · 25.12.5
C2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi
Processor / Wi-Fi: Qualcomm Atheros QCA9563 · Wi-Fi chip: Qualcomm Atheros QCA9888Get OpenWrt firmware Release listed · 25.12.6Open device guide Release listed · 25.12.5
C3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi
Processor / Wi-Fi: Qualcomm Atheros QCA9563 · Wi-Fi chip: Qualcomm Atheros QCA9888Get OpenWrt firmware Release listed · 25.12.6Open device guide Release listed · 25.12.5
C1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
C1
Get firmware Release listed · 25.12.5
C1 · Qualcomm Atheros QCA9563
Open hardware record Release listed · 25.12.5
rev C2 · Qualcomm Atheros QCA9888 Wi-Fi
Open hardware record
C2 · Qualcomm Atheros QCA9563
Open hardware record Release listed · 25.12.5
rev C3 · Qualcomm Atheros QCA9888 Wi-Fi
Open hardware record
C3 · Qualcomm Atheros QCA9563
Open hardware record Release listed · 25.12.5
Original project github.com

C1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi

First installation
GUI OEM; U-Boot web recovery

C2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi

First installation
GUI OEM

C3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi

First installation
GUI OEM; U-Boot web recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dir-842 c1 — device documentation (github.com)D-Link DIR-842 rev C1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
C1

Device details

d-link dir-842 c2 — device documentation (github.com)

Hardware revision
C2

Device details

d-link dir-842 c3 — device documentation (github.com)

Hardware revision
C3

Device details

D-Link DIR-842 rev A1 — TechInfoDepot (github.com)

Hardware revision
A1

Device details

D-Link DIR-842 rev C1 — TechInfoDepot (github.com)

Hardware revision
C1

Device details

D-Link DIR-842 rev C2 — TechInfoDepot (github.com)

Hardware revision
rev C2

Device details

D-Link DIR-842 rev C3 — TechInfoDepot (github.com)

Hardware revision
rev C3

Device details

D-Link DIR-842 rev G1 — TechInfoDepot (github.com)

Hardware revision
G1

Device details

D-Link DIR-842 rev A1 — WikiDevi (github.com)

Hardware revision
A1

OpenWrt · C1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi

OpenWrt · C1 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot web recovery
Recovery routes recorded
U-Boot web recovery
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
C2

OpenWrt · C2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi

OpenWrt · C2 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
C3

OpenWrt · C3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi

OpenWrt · C3 · Qualcomm Atheros QCA9563 / Qualcomm Atheros QCA9888 Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, U-Boot web recovery
Recovery routes recorded
U-Boot web recovery
Availability recorded by source
Available 2019

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.8 (v3.0)

DIR-842

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers

CVE-2020-15632

Affected firmware
3.13B05
Fix
Fix details in the linked record
Read zdi CVE record
Details and sources
CVE updated

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue results from the lack of proper handling of sessions. An attacker can leverage this vulnerability to execute arbitrary code in the context of the device. Was ZDI-CAN-10083.

Security advisory ZDI 20 880 — DIR-842 (zerodayinitiative.com) ↗
CVE published

CVSS 5.3 (v3.1)

DIR-842

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

CVE-2024-0717

Affected firmware
20240112
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

CVE published

CVSS 2.3 (v4.0)

DIR-842

D-Link DIR-842 vsftpd vsftpd.conf default permission

CVE-2026-19893

Affected firmware
2.01.B04
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads to incorrect default permissions. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult.

VDB-390081 | D-Link DIR-842 vsftpd vsftpd.conf default permission — DIR-842 (vuldb.com) ↗VDB-390081 | CTI Indicators (IOB, IOC, TTP, IOA) — DIR-842 (vuldb.com) ↗CVE-2026-19893 | CVE Analysis and Report — DIR-842 (vuldb.com) ↗Submit #870588 | D-Link DIR-842 DIR-842 2.01.B04 Misconfiguration — DIR-842 (vuldb.com) ↗
CVE published

D-Link DIR-842

D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters.

CVE-2023-39666

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters.

CVE published

D-Link DIR-842

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force…

CVE-2021-27342

Affected firmware
DIR-842: 3.0.2
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack

CVE-2021-27342 record (github.com) ↗CVE-2021-27342 record (blog.whtaguy.com) ↗
Check more security advisories for this device · CVE.org