Overview

The DWR-921, including all Ax, Bx, and Cx Revisions, Derivative Models, All Revisions, and All Firmware, has reached its End-of-Life (EOL)/End-of-Service Life (EOS) lifecycle. D-Link Corporation and D-Link North America (D-Link Systems, Inc.) recommend that all current users take one or more of the following actions:

1.             Transition to a current-generation product that has active firmware development and customer support.

2.             Perform comprehensive data backup.

3.             Contact our local regional office for further recommendations or information (LINK). 

By standard industry practice, products that have reached EOL/EOS status may no longer receive technical support or firmware updates. Please read the detailed information and recommendations provided below.

3rd Party Report information

          - Report #1: gor Rabinovich : CEO & Founder at AKITA.CLOUD : rabiigor _at_ akita _dot_ cloud

          - Reference :

AKITA CLOUD discovered that while there are multiple options to establish a “Secure Tunnel” ( aka VPN ) the only available encryption cipher options are DES with a key size of 96bit. Although cracking DES keys previously was a manner of years or months previously today a cloud rainbow tables cracking service such as https://crack.sh can retrieve a key in 25 seconds. Fixed firmware below.

          - Report #2: luck sdk :: sdkluckgg _at_ gmail _dot_ com

          - Reference :Post EOL/EOS; DWR-921 4G LTE Router (C3 hardware revision, firmware V01.01.3.005 /V01.01.3.006, released 2017).

  V1  CWE-798  7.5 HIGH    Hardcoded TR-069 ACS credentials
                            (amit/am123, test/test123)

  V2  CWE-798  7.5 HIGH    Hardcoded Zebra routing daemon
                            enable password (zebra)

  V3  CWE-320  6.5 MEDIUM  Embedded TR-069 TLS client
                            private key (2048-bit RSA)

 Affected Models