Hardcoded credentials

2022-06-0321:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

UNSUPPORTED WHEN ASSIGNED D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter ‘descriptor’ at SetVirtualServerSettings.php.

CPENameOperatorVersion
dir-890l_firmwareeq<= 1.22b1

CPE	Name	Operator	Version
	dir-890l_firmware	eq	<= 1.22b1

References

github.com/TyeYeah/DIR-890L-1.20-RCE

www.dlink.com/en/security-bulletin/