Replacement firmware
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comRouter
D-Link DIR-890L
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- Broadcom BCM47094
- Get OpenWrt firmware Release listed · 25.12.6
- A1; Broadcom BCM4709A0
- Open hardware record
Features & details
Check the project and hardware shown for each feature.
Device details
d-link dir-890l a1 — device documentation (github.com)D-Link DIR-890L rev A1 — TechInfoDepot (github.com)Device details — Source documentation (openwrt.org)
- Hardware revision
- A1
Device details
- Hardware revision
- /R A1
OpenWrt · Broadcom BCM47094
OpenWrt · Broadcom BCM47094 — Source documentation (openwrt.org)
- Availability recorded by source
- Discontinued 2020
Hardware details
Documented hardware
d-link dir-890l a1 — device documentation (github.com)D-Link DIR-890L rev A1 — TechInfoDepot (github.com)D-Link DIR-890L rev A1 — WikiDevi (github.com)Documented hardware — Source documentation (openwrt.org)
- Hardware revision
- A1
- Board identifier
- 8WRGAC36.1A1G
- Processor
- Broadcom BCM4709A0
- Wi-Fi chip
- Broadcom BCM43602
- Hardware revision
- /R A1
- Flash
- 32 MB
- Processor
- Broadcom BCM47094
- Memory
- 256 MB
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
D-Link DIR-890L
D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php
- Affected firmware
- DIR-890L: 1.20b01
- Fix
- Fix details in the linked record
Details and sources
D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php
D-Link DIR-890L
D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
- Affected firmware
- Version scope unspecified in source
- Fix
- Fix details in the linked record
Details and sources
D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
DIR-890L
D-Link DIR-890L UART Port rgbin hard-coded credentials
- Affected firmware
- 111b04
- Fix
- This vulnerability only affects products that are no longer supported by the maintainer.
Details and sources
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
DIR-890L
D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection
- Affected firmware
- 100CNb11 108B03
- Fix
- This vulnerability only affects products that are no longer supported by the maintainer.
Details and sources
A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
D-Link DIR-890L
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions
- Affected firmware
- Version details in source scope
- Fix
- Fix details in the linked record
Details and sources
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.