Deviceways

Router

D-Link DSL-2750u

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

HardwareC1

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
C1
Open hardware recordopenwrt.org
Original project github.com

C1

Device support in source
Retired; check the documented hardware and older release resources.
Limitations
DSL Modem
First installation
CFE TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dsl-2750u c1 — device documentation (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
C1

Device details

D-Link DSL-2750U rev C1 — WikiDevi (github.com)

Hardware revision
/NRU rev C1

Device details

D-Link DSL-2750U rev U1 — WikiDevi (github.com)

Hardware revision
U1

OpenWrt · C1

OpenWrt · C1 — Source documentation (openwrt.org)

Installation routes recorded
CFE TFTP recovery
Recovery routes recorded
CFE TFTP recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 8.7 (v4.0)

DSL-2750U

D-Link DSL-2730U/2750U/2750E Path Traversal Arbitrary File Read

CVE-2025-34048

Affected firmware
SEA_1.04 SEA_1.07
Fix
Fix details in the linked record
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

A path traversal vulnerability exists in the web management interface of D-Link DSL-2730U, DSL-2750U, and DSL-2750E ADSL routers with firmware versions IN_1.02, SEA_1.04, and SEA_1.07. The vulnerability is due to insufficient input validation on the getpage parameter within the /cgi-bin/webproc CGI script. This flaw allows an unauthenticated remote attacker to perform path traversal attacks by supplying crafted requests, enabling arbitrary file read on the affected device. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.

Security advisory dlink dsl routers path traversal file read — DSL-2750U (vulncheck.com) ↗
CVE published

CVSS 5.3 (v3.1)

DSL-2750U

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

CVE-2024-0717

Affected firmware
20240112
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

CVE published

CVSS 5.1 (v4.0)

DSL-2750U

D-Link DSL-2750U Port Forwarding Page cross site scripting

CVE-2024-9792

Affected firmware
R5B017
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely.

VDB-279945 | D-Link DSL-2750U Port Forwarding Page cross site scripting — DSL-2750U (vuldb.com) ↗VDB-279945 | CTI Indicators (IOB, IOC, TTP, IOA) — DSL-2750U (vuldb.com) ↗Submit #415532 | D-Link DSL-2750U R5B017 Cross Site Scripting — DSL-2750U (vuldb.com) ↗
CVE published

D-Link DSL-2750u

D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control

CVE-2023-46033

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
CVE updated

D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control.

CVE published

DSL-2750U

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection

CVE-2021-3708

Affected firmware
firmware vME1.16 or prior versions
Fix
Fix details in the linked record
Read jpcert CVE record
Details and sources
CVE updated

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device.

JVNVU#92088210: Multiple vulnerabilities in D-Link router DSL-2750U — DSL-2750U (jvn.jp) ↗
Check more security advisories for this device · CVE.org