Support Announcements
(Non-US) DIR-822 :: H/W Rev. Ax/Bx/Cx :: All Models :: End of Life :: End of Service :: Reported Security Vulnerability

 

 

Overview

 

The DIR-822, all models of A and B hardware revisions, which are non-US products, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle.  D-Link US recommends D-Link devices that have reached EOL/EOS, to be retired and replaced. Please contact your regional office for recommendations (LINK).

 

As a general policy, when products reach EOS/EOL, they can no longer be supported, and all firmware development for these products cease.

 

Please read information and recommendations below.

3rd Party Report information

 

     - Ensign InfoSecurity Labs :: Quynh Le :: quynh_le_at_ ensigninfosecurity _dot_ com

 

     - Ensign InfoSecurity Labs :: Eng De Sheng :: DeSheng_Eng _at_ ensigninfosecurity _dot_ com

 

Report
 

LAN-Side Unauthenticated Remote Code Execution (RCE) elevated from HNAP Stack-Based Buffer Overflow using firmware DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01

 

Affected Models 

 

 

Model Region Hardware Revision End of Support Legacy Website Last Updated
DIR-822 Non-US
All A & B Series H/W Revisions 04/31/2018 Not Available for Non-US SKUS
01/30/2024
DIR-822 US/CA All C & E Series H/W Revisions 03/29/2024 Pending EOS Date 01/30/2024


 

Recommendation for End of Support /End of Life Products

 

From time to time, D-Link will decide that some of its products have reached End of Support ("EOS") / End of Life (“EOL”). D-Link may choose to EOS/EOL a product due to evolution of technology, market demands, new innovations, product efficiencies based on new technologies, or the product matures over time and should be replaced by functionally superior technology.

 

For US Consumer

 

If a product has reached End of Support ("EOS") / End of Life ("EOL"), there is normally no further extended support or development for it.

 

Typically for these products, D-Link will be unable to resolve device or firmware issues since all development and customer support has ceased. 

 

D-Link strongly recommends that this product be retired and cautions that any further use of this product may be a risk to devices connected to it. If US consumers continue to use these devices against D-Link's recommendation, please make sure the device has the most recent firmware, make sure you frequently update the device's unique password to access its web-configuration, and always have WIFI encryption enabled with a unique password.