PT-2022-3311 · D Link · D-Link Dir-890L

Published 2022-05-27 · Updated 2023-08-01 · CVE-2022-30521

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-890L versions prior to DIR890LA1 FW107b09.bin

Description The issue is related to a stack-based buffer overflow vulnerability in the LAN-side Web-Configuration Interface of the D-Link Wi-Fi router firmware. This vulnerability is caused by the incorrect checking of string lengths in parameters given by HTTP headers in the sprintf() function. Exploitation of this issue can allow an attacker to execute arbitrary code by sending a specially constructed payload to port 49152.

Recommendations For versions prior to DIR890LA1 FW107b09.bin, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to port 49152 to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2022-04057

CVE-2022-30521

Affected Products

D-Link Dir-890L

References · 7

• 🔥❌ https://github.com/winmt/CVE/blob/main/DIR-890L/README.md · Exploit, Deleted
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04057 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-30521 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30521 · Vendor Advisory
• ❌ https://github.com/winmt/my-vuls/tree/main/DIR-890L · Note, Deleted
• https://vuldb.com/ru/?id.201200 · Note