CVE-2020-8863

🗓️ 23 Mar 2020 20:25:23Reported by zdiType

Vulnerability in D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 allows bypassing authentication

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the HNAP Private Login component of D-Link’s wireless router software, including models D-Link DIR-867-US, D-Link DIR-878, and D-Link DIR-882-US, allows a hacker to change the administrator password.	20 Mar 202000:00	–	bdu_fstec
Circl	CVE-2020-8863	17 Oct 202417:58	–	circl
CNVD	D-Link DIR-867, DIR-878 and DIR-882 HNAP Authentication Bypass Vulnerability	25 Feb 202000:00	–	cnvd
Cvelist	CVE-2020-8863	23 Mar 202020:25	–	cvelist
EUVD	EUVD-2020-29705	7 Oct 202500:30	–	euvd
NVD	CVE-2020-8863	23 Mar 202021:15	–	nvd
OSV	CVE-2020-8863	23 Mar 202021:15	–	osv
Prion	Authentication flaw	23 Mar 202021:15	–	prion
RedhatCVE	CVE-2020-8863	5 Feb 202513:20	–	redhatcve
Zero Day Initiative	D-Link Multiple Routers HNAP PrivateLogin Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability	24 Feb 202000:00	–	zdi

NVD

Vulners

Node

dlink dir-878_firmwareRange≤1.20b03

AND

dlink dir-878Match-

Node

dlink dir-882_firmwareRange≤1.10b04

AND

dlink dir-882Match-

Node

dlink dir-867_firmwareRange≤1.10b04

AND

dlink dir-867Match-

[
  {
    "product": "Multiple Routers",
    "vendor": "D-Link",
    "versions": [
      {
        "status": "affected",
        "version": "1.10B04"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-267/
supportannouncement	www.supportannouncement.us.dlink.com/announcement/publication.aspx

17 Jun 2026 03:27Current

9High risk

Vulners AI Score9

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.76733