Medium severity · published Jul 27, 2025
CVE-2025-8231
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04
6.8
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dir-890l Firmware · Dlink
through 1.11b04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8231
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8231
Exploit
https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md
Permissions Required
https://vuldb.com/?ctiid.317819
Third Party Advisory
https://vuldb.com/?id.317819
Third Party Advisory
https://vuldb.com/?submit.622337
Product
https://www.dlink.com/
More from Dir-890l Firmware
9.8
CVE-2019-17621
D-Link DIR-859 Router Command Execution Vulnerability
9.8
CVE-2025-4340
A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03
9.8
CVE-2022-30521
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions
9.8
CVE-2017-14948
Certain D-Link products are affected by: Buffer Overflow
9.8
CVE-2016-6563
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers