Login Request a demo
Critical severity · published Jun 2, 2022
CVE-2022-30521
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions
9.8
CVSS
15.1%
EPSS
No
On KEV
Description
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)15.1% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dir-890l Firmware · Dlink
through 1.07b09 · source: NVD
Affected product
DF
Dir-890l Firmware
Dlink
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-30521
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-30521
Exploit
https://github.com/winmt/CVE/blob/main/DIR-890L/README.md
github.com
https://github.com/winmt/my-vuls/tree/main/DIR-890L
Vendor Advisory
https://www.dlink.com/en/security-bulletin/
More from Dir-890l Firmware
9.8
CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability
9.8
CVE-2025-4340
A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03
9.8
CVE-2017-14948
Certain D-Link products are affected by: Buffer Overflow
9.8
CVE-2016-6563
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers
8.8
CVE-2022-29778
D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php