Is the D-Link DIR-605 still getting security updates?
The D-Link DIR-605 stopped receiving security updates on 1 February 2015. New vulnerabilities will not be fixed.
The date after which a device gets no more security fixes is also called its end of life (EOL) or end of support.
Security updates ended on
1 February 2015What to do. Attackers are using known flaws in this model. Replace it. Until then, turn off remote administration and UPnP, and keep it off the Internet.
Vulnerabilities attackers are using
The U.S. cybersecurity agency (CISA) lists these vulnerabilities as actively exploited. Its description names the affected hardware versions when they are known.
- CVE-2021-40655: D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page.
Support timeline
By hardware version
Dates differ between hardware versions and sometimes between markets. The version is on the label under the device.
| Hardware version | Status | Security updates until | Basis | Source |
|---|---|---|---|---|
| All versions | Unsupported | 1 February 2015 | Official end date published by the manufacturer. | United States |
| All versions | Unsupported | 1 February 2015 | Official end date published by the manufacturer. | Worldwide |
Questions
Is the D-Link DIR-605 still getting security updates?
The D-Link DIR-605 stopped receiving security updates on 1 February 2015. New vulnerabilities will not be fixed.
Is the D-Link DIR-605 affected by vulnerabilities attackers are using?
Yes. The CISA catalogue of exploited vulnerabilities lists CVE-2021-40655 for this model. Check the affected hardware versions and install the latest firmware, or replace the device if it is no longer supported.
What does end of life mean for the D-Link DIR-605?
After its end of life, the D-Link DIR-605 receives no more security fixes from D-Link. It keeps working, but any vulnerability found later stays open, which makes it an easy target once attackers know about it.
Where does this date come from?
From the manufacturer: D-Link | Legacy Products (Model / Last Day of Support); D-Link Security Announcement SAP10393: DIR-600 / DIR-605 / DIR-605L : All H/W Revisions : End of Life (EoL) / End of Service (EoS) :: Vulnerability Report. Each date is shown exactly as published.
Other D-Link routers
- DGL-3420ended 1 May 2012 Unsupported
- DGL-4100ended 5 November 2012 Unsupported
- DGL-4300ended 1 July 2010 Unsupported
- DGL-4500ended 5 May 2013 Unsupported
- DGL-5500ended 1 November 2017 Unsupported
- DI-514ended 1 August 2007 Unsupported
- DI-524ended 1 January 2009 Unsupported
- DI-604ended 1 June 2008 Unsupported
- DI-604UPended 29 December 2013 Unsupported
- DI-614+ended 1 March 2008 Unsupported
- DI-624ended 1 August 2010 Unsupported
- DI-624Mended 1 June 2008 Unsupported