[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftB5AnHKqBMMjPzNkG7y-P3t7UMoq45U2Rl7zkNIGa4c":3,"g5a-family:dlink\u002Fdir-890l":109,"g5a-ex:dlink\u002Fdir-890l@*":117},{"success":4,"data":5},true,{"product":6,"versions":19,"topVulnerabilitiesByEpss":21,"kevVulnerabilities":81,"seoMetadata":87,"meta":106},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":18},"dlink","dir-890l",1,11,"2025-07-27",[13],{"version":14,"cve_count":15,"kev_count":16,"has_kev":17},"a1",3,0,false,"Dir-890l by Dlink is a technology product with 1 tracked version and 11 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[20],{"version":14,"cve_count":15,"kev_count":16,"has_kev":17},[22,30,36,41,46,53,58,65,71,76],{"cveId":23,"description":24,"publishedDate":25,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":4,"epssScore":29},"CVE-2019-17621","The UPnP endpoint URL \u002Fgena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","2019-12-30",9.8,"v3.1","Critical",0.89624,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":26,"cvssVersion":34,"severity":28,"isKev":17,"epssScore":35},"CVE-2016-6563","Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L.","2018-07-13","v3.0",0.79735,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":40},"CVE-2022-30521","The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of \u002Fhtdocs\u002Fcgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.","2022-06-02",0.15122,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":45},"CVE-2016-5681","Stack-based buffer overflow in dws\u002Fapi\u002FLogin on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.","2016-08-25",0.11927,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":27,"severity":51,"isKev":17,"epssScore":52},"CVE-2025-4340","A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11\u002F108B03. Affected is the function sub_175C8 of the file \u002Fhtdocs\u002Fsoap.cgi. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","2025-05-06",6.3,"Medium",0.05253,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":26,"cvssVersion":27,"severity":28,"isKev":17,"epssScore":57},"CVE-2017-14948","Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L\u002FR 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs\u002Ffileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution.","2019-10-14",0.04929,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":27,"severity":63,"isKev":17,"epssScore":64},"CVE-2022-29778","D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php","2022-06-03",8.8,"High",0.02707,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":27,"severity":63,"isKev":17,"epssScore":70},"CVE-2019-20213","D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.","2020-01-02",7.5,0.02181,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":69,"cvssVersion":27,"severity":63,"isKev":17,"epssScore":75},"CVE-2023-30063","D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.","2023-05-01",0.01112,{"cveId":77,"description":78,"publishedDate":11,"cvssScore":79,"cvssVersion":27,"severity":51,"isKev":17,"epssScore":80},"CVE-2025-8231","A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.",6.8,0.00689,[82],{"cveId":23,"description":24,"publishedDate":25,"cvssScore":26,"severity":28,"isKev":4,"epssScore":29,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":85,"cisaRequiredAction":86},"D-Link DIR-859 Router Command Execution Vulnerability","2023-06-29","D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, \u002Fgena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Dir-890l by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-890l by Dlink covering 1 version with 11 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-890l vulnerabilities, Dir-890l security, Dir-890l CVE, Dlink Dir-890l, Dir-890l threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-890l KEV, Dir-890l exploited vulnerabilities",{"@context":92,"@type":93,"name":94,"description":89,"url":95,"manufacturer":96,"applicationCategory":100,"softwareVersion":101,"mainEntity":102},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-890l","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-890l",{"@type":97,"name":98,"url":99},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","1 versions tracked",{"@type":103,"name":104,"description":105,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Dir-890l Security Vulnerabilities","Security vulnerabilities affecting Dir-890l by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":107,"apiVersion":108},"2026-10-18T20:17:05.185Z","3.0",[110,113,115],{"product":111,"cves":112},"dir-890l_firmware",10,{"product":114,"cves":9},"dir-890l_a1",{"product":116,"cves":9},"dir-890l_a1_firmware",{"rows":118,"total":9,"capped":17,"failed":16},[119],{"cveId":23,"name":83,"severity":28,"cvss":26,"added":84,"epss":29,"published":120,"ranges":121,"checked":4,"hits":122,"covers":17},"2019-12-30T17:15:19.857",[],[]]