| Titel | D-Link DIR-890L Versions up to DIR890LA1_FW111b04 Hard-coded Credentials |
|---|
| Beschreibung | In the `rgbin` binary of D-Link dir890L, the authentication for UART is handled via function at address 0xD084. It compares user's input with credential retrieved from system configuration. However, under certain start configuration, the system will uses the hardcoded credential `35dHJLI!wyX:ut77a3d33w` for authentication. |
|---|
| Quelle | ⚠️ https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md |
|---|
| Benutzer | nich0las (UID 51709) |
|---|
| Einreichung | 25.07.2025 10:13 (vor 1 Jahr) |
|---|
| Moderieren | 26.07.2025 15:18 (1 day later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 317819 [D-Link DIR-890L bis 111b04 UART Port rgbin schwache Authentisierung] |
|---|
| Punkte | 19 |
|---|