CVE-2025-8231
D-Link DIR-890L UART Port rgbin hard-coded credentials
- State
- Published
- Severity
- 7.0 High
- Published
- Jul 27, 2025
- Updated
- Jul 28, 2025
- Reserved
- Jul 26, 2025
Description
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.0 High | CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.8 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.8 Medium | CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 7.2 High | AV:L/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
DIR-890LD-Link |
|
References
- VDB-317819 | D-Link DIR-890L UART Port rgbin hard-coded credentialsvdb-entry
- VDB-317819 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #622337 | D-Link DIR-890L Versions up to DIR890LA1_FW111b04 Hard-coded Credentialsthird-party-advisory
- https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.mdexploit
- https://www.dlink.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.