A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
References
| Link | Resource |
|---|---|
| https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md | Exploit |
| https://vuldb.com/?ctiid.317819 | Permissions Required VDB Entry |
| https://vuldb.com/?id.317819 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.622337 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
06 Aug 2025, 17:01
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink dir-890l
Dlink Dlink dir-890l Firmware |
|
| CPE | cpe:2.3:o:dlink:dir-890l_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-890l:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md - Exploit | |
| References | () https://vuldb.com/?submit.622337 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://vuldb.com/?ctiid.317819 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.317819 - Third Party Advisory, VDB Entry |
27 Jul 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-27 14:15
Updated : 2025-08-06 17:01
NVD link : CVE-2025-8231
Mitre link : CVE-2025-8231
JSON object : View
Products Affected
dlink
- dir-890l_firmware
- dir-890l