Replacement firmware
- A1
- Browse firmware downloads Beta build · 10-13-2026-r66345
- B1 · MediaTek MT7602E / MediaTek MT7612E Wi-Fi
- Browse firmware downloads Beta build · 10-13-2026-r66345
Router
D-Link DIR-860L
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- B1 · MediaTek MT7602EN / MediaTek MT7612E Wi-Fi
- Processor: MediaTek MT7621AT · Wi-Fi chip: MediaTek MT7602EN · Wi-Fi chip: MediaTek MT7612EOpen hardware record Release listed · 25.12.5
- B1 · MediaTek MT7602E / MediaTek MT7612E Wi-Fi
- Get OpenWrt firmware Release listed · 25.12.6
- B1
- Get firmware Release listed · 25.12.5
- B1 · MediaTek MT7621AT
- Open hardware record Release listed · 25.12.5
B1 · MediaTek MT7602E / MediaTek MT7612E Wi-Fi
- First installation
- D-Link Recovery GUI
Features & details
Check the project and hardware shown for each feature.
Device details
d-link dir-860l b1 — device documentation (github.com)D-Link DIR-860L rev B1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)
- Hardware revision
- B1
Device details
- Hardware revision
- A1
Device details
- Hardware revision
- B1
Device details
- Hardware revision
- A1
OpenWrt · B1 · MediaTek MT7602E / MediaTek MT7612E Wi-Fi
OpenWrt · B1 · MediaTek MT7602E / MediaTek MT7612E Wi-Fi — Source documentation (openwrt.org)
- Installation routes recorded
- D-Link Recovery GUI
- Recovery routes recorded
- D-Link Recovery GUI
- Availability recorded by source
- Discontinued 2017
Hardware differences
A1 · Broadcom BCM43217 / Broadcom BCM4352 Wi-Fi
- Flash chip
- Spansion S34ML01G100TFI00
- Processor
- Broadcom BCM47081A0
- Memory chip
- Micron MT47H64M16HR-25E:H
- Wi-Fi chip
- Broadcom BCM43217
- Wi-Fi chip
- Broadcom BCM4352
B1 · MediaTek MT7602EN / MediaTek MT7612E Wi-Fi
- Flash chip
- Macronix MX25L12805D
- Processor
- MediaTek MT7621AT
- Memory chip
- Nanya NT5CB64M16FP-DH
- Wi-Fi chip
- MediaTek MT7602EN
- Wi-Fi chip
- MediaTek MT7612E
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
D-Link DIR-860L
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and…
- Affected firmware
- Version details in source scope
- Fix
- Fix details in the linked record
Details and sources
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.
D-Link DIR-860L
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi
- Affected firmware
- DIR-860L: v2.03
- Fix
- Fix details in the linked record
Details and sources
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
D-Link DIR-860L
In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary…
- Affected firmware
- Version details in source scope
- Fix
- Fix details in the linked record
Details and sources
In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.
DIR-860L
D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection
- Affected firmware
- 2.04.B04
- Fix
- This vulnerability only affects products that are no longer supported by the maintainer.
Details and sources
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgi_main of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
D-Link DIR-860L
A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
- Affected firmware
- Version scope unspecified in source
- Fix
- DIR-860L / DIR-865L / DIR-868L / DIR-880L :: All Models :: All Hardware Revisions :: End-of-Life (EoL) :: End-of-Service (EoL) :: Reported Vulnerabilities
Details and sources
Manufacturer fix — D-Link DIR-860L ↗A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.