Dlink Dir-890l Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-890l Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2016-6563 — CVSS 9.8 (critical): Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers…
• CVE-2017-14948 — CVSS 9.8 (critical): Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute…
• CVE-2022-30521 — CVSS 9.8 (critical): The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L…
• CVE-2019-17621 — CVSS 9.8 (critical) — actively exploited: The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to…
• CVE-2022-29778 — CVSS 8.8 (high): D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor'…
• CVE-2019-20213 — CVSS 7.5 (high): D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as…
• CVE-2023-30063 — CVSS 7.5 (high): D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
• CVE-2025-8231 — CVSS 6.8 (medium): A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown…
• CVE-2018-12103 — CVSS 6.5 (medium): An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and…
• CVE-2025-4340 — CVSS 6.3 (medium): A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function…