Skip to main content

Dir 890L Firmware CVE-2025-8231

MEDIUM
Use of Hard-coded Password (CWE-259)
2025-07-27 cna@vuldb.com
Authentication Bypass D-Link Dir 890L Firmware
5.2
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
5.2 MEDIUM
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 26, 2026 - 19:12 vuln.today
CVE Published
Jul 27, 2025 - 14:15 cve.org
MEDIUM 5.2

DescriptionCVE.org

A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

The D-Link DIR-890L router up to firmware version 111b04 contains a hard-coded credentials vulnerability in the UART interface's rgbin file, allowing attackers with physical access to gain full device compromise. No prior authentication is required, and a proof-of-concept exploit is publicly available. The device is end-of-life and will not receive a patch, and while no active exploitation is known, the vulnerability enables complete takeover once physical access is obtained.

More in Dir 890L Firmware

View all
CVE-2016-5681 CRITICAL
9.8 Aug 25

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx befor
CVE-2019-17621 CRITICAL POC
9.8 Dec 30

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated rem
CVE-2022-30521 CRITICAL POC
9.8 Jun 02

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmwa
CVE-2022-29778 HIGH POC
8.8 Jun 03

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the param
CVE-2023-30063 HIGH POC
7.5 May 01

D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass. Rated high severity (CVSS 7.5), this vulnerability is

CVE-2025-4340 MEDIUM POC
5.3 May 06

A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Rated medi
CVE-2018-12103 MEDIUM
6.5 Jul 05

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta

Same weakness CWE-259 – Use of Hard-coded Password

View all
CVE-2025-57788 MEDIUM POC
6.9
CVE-2026-20316 MEDIUM POC
5.3
CVE-2012-5862 CRITICAL POC
10.0
CVE-2024-42639 CRITICAL POC
9.8
CVE-2024-36526 CRITICAL POC
9.8
CVE-2024-38902 CRITICAL POC
9.8
CVE-2023-5222 CRITICAL POC
9.8
CVE-2023-3237 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2025-8231 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy