D-Link DIR-890L
Approved changes feed: RSS · Atom
cpe:2.3:h:dlink:dir-890l:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dir 890L (b18085b0-396a-56a7-84e7-28b2b3dd493b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8231 |
not_vulnerable | 2026-06-08 07:45:19.841553 |
D-Link DIR-890L UART Port rgbin hard-coded credentials
MEDIUM (6.8)
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-07-27T13:32:05.676Z
Updated: 2025-07-28T14:54:07.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30521 |
not_vulnerable | 2026-06-08 05:43:38.130035 |
Details available
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.
Published: 2022-05-27T00:00:00.000Z
Updated: 2024-08-03T06:48:36.383Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29778 |
not_vulnerable | 2026-06-08 05:42:48.813251 |
Details available
D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php
Published: 2022-06-03T20:19:24.000Z
Updated: 2024-10-28T20:55:50.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20213 |
not_vulnerable | 2026-06-08 05:13:30.591970 |
Details available
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
Published: 2020-01-02T01:03:16.000Z
Updated: 2024-08-05T02:39:09.121Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17621 |
not_vulnerable | 2026-06-08 05:13:10.863854 |
Details available
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Published: 2019-12-30T16:09:17.000Z
Updated: 2025-10-21T23:35:54.315Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12103 |
not_vulnerable | 2026-06-08 05:10:39.832885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14948 |
not_vulnerable | 2026-06-08 05:08:57.649538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6563 |
not_vulnerable | 2026-06-08 05:08:02.786983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.