| 标题 | D-Link DIR-890L Versions up to DIR890LA1_FW111b04 Hard-coded Credentials |
|---|
| 描述 | In the `rgbin` binary of D-Link dir890L, the authentication for UART is handled via function at address 0xD084. It compares user's input with credential retrieved from system configuration. However, under certain start configuration, the system will uses the hardcoded credential `35dHJLI!wyX:ut77a3d33w` for authentication. |
|---|
| 来源 | ⚠️ https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md |
|---|
| 用户 | nich0las (UID 51709) |
|---|
| 提交 | 2025-07-25 10時13分 (1 年前) |
|---|
| 管理 | 2025-07-26 15時18分 (1 day later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 317819 [D-Link DIR-890L 直到 111b04 UART Port rgbin 弱身份验证] |
|---|
| 积分 | 19 |
|---|