Medium severity · published Jul 27, 2025
CVE-2025-8231
D-Link DIR-890L UART Port rgbin hard-coded credentials
6.8
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
DIR-890L · D-Link
111b04 · source: vendor
DF
Dir-890l Firmware · Dlink
through 1.11b04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8231
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8231
Exploit
https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md
Permissions Required
https://vuldb.com/?ctiid.317819
Third Party Advisory
https://vuldb.com/?id.317819
Third Party Advisory
https://vuldb.com/?submit.622337
Product
https://www.dlink.com/
More from DIR-890L
9.8
CVE-2025-4340
D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection