Deviceways

Router

D-Link DWR-512

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
B
Open device guide Open hardware record
Original project github.com

B

Device support in source
Retired; check the documented hardware and older release resources.
First installation
JBoot web recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dwr-512 b — device documentation (github.com)Device details — Source documentation (openwrt.org)D-Link DWR-512 rev B — TechInfoDepot (github.com)

Hardware revision
B
Hardware revision
rev B

Device details

D-Link DWR-512 rev A1 — TechInfoDepot (github.com)D-Link DWR-512 rev A1 — WikiDevi (github.com)

Hardware revision
rev A1
Hardware revision
A1

OpenWrt · B

OpenWrt · B — Source documentation (openwrt.org)

Installation routes recorded
JBoot web recovery
Recovery routes recorded
JBoot web recovery
Availability recorded by source
Discontinued 2017

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

D-Link DWR-512

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version…

CVE-2018-19300

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.

CVE-2018-19300 record (community.greenbone.net) ↗
CVE published

D-Link DWR-512

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through…

CVE-2018-10824

Affected firmware
DWR-512: through 2.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.

20181012 Multiple vulnerabilities in D-Link routers — D-Link DWR-512 (seclists.org) ↗
CVE published

D-Link DWR-512

An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices

CVE-2018-10823

Affected firmware
DWR-512: through 2.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.

20181012 Multiple vulnerabilities in D-Link routers — D-Link DWR-512 (seclists.org) ↗
CVE published

D-Link DWR-512

Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912…

CVE-2018-10822

Affected firmware
DWR-512: through 2.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.

20181012 Multiple vulnerabilities in D-Link routers — D-Link DWR-512 (seclists.org) ↗
Check more security advisories for this device · CVE.org