D-Link legacy routers, cameras and NAS (hardware) End of Life (EOL) Dates & Support Timeline

D-Link legacy routers, cameras and NAS (hardware) lifecycle status — the real story

D-Link legacy routers, gateways, cameras and NAS units are the consumer and small-office devices that CISA's Known Exploited Vulnerabilities catalog keeps returning to: the catalog holds 27 D-Link entries and, for most of them, CISA's required action reads that the impacted product is end-of-life and should be disconnected if still in use. Cycles on this page are every router, gateway, DSL and cable modem, VPN router, firewall, VoIP gateway, mesh system, IP camera, NAS and network video recorder on D-Link Systems' (US) Legacy Products list (model prefixes DIR, DI, DSL, DCM, DSR, DFL, DVG, COVR, DGL, EBR, WBR, DCS, DNS, DNR), which prints a Last Day of Support per model. D-Link's own words on that list: the resources associated with these products have ceased their development and are no longer supported, and D-Link recommends retiring them and replacing them with products that receive firmware updates. The list was read twice on 2026-10-18 (the page HTML and the page in the built-in browser, every row identical) by tools/dlink-legacy.mjs, and the verifier and a vendor sentinel re-check it at every build. D-Link's switches and wireless access points from the same list are on the D-Link legacy switches and wireless page.

Field mapping: eol is D-Link's Last Day of Support, as printed (month/day/year). D-Link publishes no separate end-of-sale or release date on the list, so the release and support columns are left blank rather than filled with a proxy. Models named in KEV but absent from the US legacy list (DIR-820 without the L suffix, DIR-300, DIR-610, DSL-2750B, DSL-2760U, DCS-2670L, DWL-2600AP) and current models (DIR-823X) are not modelled here; D-Link's regional lists differ and we do not substitute one region's date for another. Adapters, powerline, antenna, KVM and media products on the same list are not modelled.

The dates. DIR-859 reached its Last Day of Support on December 10, 2020 and has two KEV entries, CVE-2019-17621 (added June 29, 2023) and CVE-2024-0769 (added June 25, 2025); D-Link's security announcement SAP10371 confirms the model is end of support and points to the legacy list. DIR-820L ended on November 1, 2017 (CVE-2022-26258, added September 8, 2022; announcement SAP10264 states the DIR-810L, 820L, 830L, 826L and 836L have reached end of life and should be retired and replaced). The ShareCenter NAS units, DNS-320L and DNS-327L on May 31, 2020, DNS-340L on July 31, 2019, DNS-325 on September 1, 2017 and DNS-320 on December 1, 2018, carry CVE-2024-3272 and CVE-2024-3273 (added April 11, 2024), CVE-2019-16057 and CVE-2020-25506. DNR-322L ended on November 30, 2021 (CVE-2022-40799, added August 5, 2025); DCS-2530L on September 17, 2021 (CVE-2020-25078 and CVE-2020-25079, added August 5, 2025); DCS-930L on October 31, 2018 (CVE-2016-11021); DIR-645 on December 31, 2018 (CVE-2015-2051); DIR-825 on September 1, 2015 (CVE-2020-29557); DIR-605 on February 1, 2015 (CVE-2021-40655); and DIR-600 on December 1, 2010 (CVE-2014-100005, a 2014 flaw added to KEV in May 2024).

Every model on this page is an end-of-support edge device in the sense of CISA BOD 26-02, and for these the directive's answer and the vendor's are the same: retire and replace. There is no firmware coming.

Source note (2026-10-11): D-Link's legacy list has an English/French selector and began serving French by default to a cookie-less request (title 'Produits discontinués', columns 'Modèle' and 'Dernier jour de support'); the English rendering is at https://legacy.us.dlink.com/default.aspx?language=1 and is what the weekly verifier reads. Both renderings were read twice on 2026-10-11 (curl and browser) and every one of the 14 dates above was unchanged in both languages.

D-Link legacy routers, cameras and NAS (hardware) release and support pattern

Of the 317 release lines tracked, 316 are past end of life and 1 is still within support. The next scheduled end of life is DSR-150 on December 31, 2026 — 66 days from this build.

Computed from the tracked release data at every build — the figures above are the dates in the table, restated, not an editorial estimate.

D-Link legacy routers, cameras and NAS (hardware) security intelligence

CISA KEV history: D-Link legacy routers, cameras and NAS (hardware) is named in CISA's Known Exploited Vulnerabilities catalog 15 times, most recently on 2025-08-05, including use in ransomware campaigns. Derived from CISA's live catalog at every build.

What does D-Link legacy routers, cameras and NAS (hardware) end of life mean for your organization?

When a version of D-Link legacy routers, cameras and NAS (hardware) reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.

The CVE blind spot: A CVE-based scan does not show the accumulation of unpatched vulnerabilities in EOL software. Some scanners flag unsupported versions of common products, but coverage varies, and none of them give you the date in advance. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no vendor patch is coming. This is one of the most dangerous gaps in enterprise security posture.

Organizations running EOL D-Link legacy routers, cameras and NAS (hardware) should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.

Your options when D-Link legacy routers, cameras and NAS (hardware) reaches end of life

There are four realistic paths. Which one is right depends far more on how long the system needs to keep running than on the version you are on today.

How to choose, in one question: how many more years does this system need to run? Under a year, extended support (where it exists) is usually cheaper than an emergency migration. One to three years, migrate — support purchased repeatedly costs more than doing the project once, and the project only gets harder as the version ages. Indefinitely, migrate now and plan the next migration before it surprises you.

Worth saying plainly, because vendors selling extended support rarely will: extended support is often the more expensive choice over a multi-year horizon. It is the right answer when a deadline is genuinely unreachable, not as a default. Compare the annual fee against the one-time cost of migrating before committing to either.

Formalizing decisions like this across your estate? Our free EOL policy template is a ready-to-adopt policy with risk tiers, remediation SLAs, and audit mapping — no signup, free to use and share.

Extended Support Options

If you cannot migrate immediately, check whether the vendor or a third party sells extended support with security patches for your D-Link legacy routers, cameras and NAS (hardware) version; coverage varies by product and version. Where it exists it is a bridge, not a permanent solution — plan your migration in parallel.

Related Products