Deviceways

Router

D-Link DWR-921

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
C1 · MediaTek MT7620N
Open hardware record Release listed · 25.12.5
C3 · Qualcomm MDM9225 Wi-Fi
Processor: MediaTek MT7620NOpen hardware record Release listed · 25.12.5
C1 · MediaTek MT7620N Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
C3 · MediaTek MT7620N Wi-Fi
Get OpenWrt firmware Release listed · 25.12.6
C1 · 11340Y20SH00301A1
Get firmware Release listed · 25.12.5
C3 · 11340Y20SH00301A1
Get firmware Release listed · 25.12.5
C1 · MediaTek MT7620N
Open hardware record Release listed · 25.12.5
C3 · MediaTek MT7620N
Open hardware record Release listed · 25.12.5
Original project github.com

C1 · MediaTek MT7620N Wi-Fi

First installation
GUI OEM; JBoot web recovery

C3 · MediaTek MT7620N Wi-Fi

First installation
GUI OEM; JBoot web recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dwr-921 c1 — device documentation (github.com)D-Link DWR-921 rev C1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
C1

Device details

d-link dwr-921 c3 — device documentation (github.com)D-Link DWR-921 rev C3 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
C3

Device details

D-Link DWR-921 rev A1 — TechInfoDepot (github.com)

Hardware revision
rev A1

Device details

D-Link DWR-921 rev B1 — TechInfoDepot (github.com)

Hardware revision
B1

Device details

D-Link DWR-921 rev C1 — TechInfoDepot (github.com)

Hardware revision
C1

Device details

D-Link DWR-921 rev C3 — TechInfoDepot (github.com)

Hardware revision
C3

Device details

D-Link DWR-921 rev A1 — WikiDevi (github.com)

Hardware revision
A1

Device details

D-Link DWR-921 rev B1 — WikiDevi (github.com)

Hardware revision
B1

OpenWrt · C1 · MediaTek MT7620N Wi-Fi

OpenWrt · C1 · MediaTek MT7620N Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, JBoot web recovery
Recovery routes recorded
JBoot web recovery
Availability recorded by source
Discontinued

OpenWrt · C3 · MediaTek MT7620N Wi-Fi

OpenWrt · C3 · MediaTek MT7620N Wi-Fi — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, JBoot web recovery
Recovery routes recorded
JBoot web recovery
Availability recorded by source
Available 2018

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 5.3 (v3.1)

DWR-921

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

CVE-2024-0717

Affected firmware
20240112
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.

CVE published

D-Link DWR-921

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version…

CVE-2018-19300

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.

CVE-2018-19300 record (community.greenbone.net) ↗
CVE published

D-Link DWR-921

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through…

CVE-2018-10824

Affected firmware
DWR-921: through 2.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access.

20181012 Multiple vulnerabilities in D-Link routers — D-Link DWR-921 (seclists.org) ↗
CVE published

D-Link DWR-921

An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices

CVE-2018-10823

Affected firmware
DWR-921: through 2.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals.

20181012 Multiple vulnerabilities in D-Link routers — D-Link DWR-921 (seclists.org) ↗
CVE published

D-Link DWR-921

Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912…

CVE-2018-10822

Affected firmware
DWR-921: through 2.02
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices allows remote attackers to read arbitrary files via a /.. or // after "GET /uir" in an HTTP request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2017-6190.

20181012 Multiple vulnerabilities in D-Link routers — D-Link DWR-921 (seclists.org) ↗
Check more security advisories for this device · CVE.org