CVE-2022-30521

    Dashboard / Vulnerabilities / CVE-2022-30521

    CVE-2022-30521

    Published: 2 Jun 2022Last Modified: 11 Mar 2026

    Summary:

    Details: The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.

    References: , https://github.com/winmt/my-vuls/tree/main/DIR-890L, https://www.dlink.com/en/security-bulletin/, https://github.com/winmt/CVE/blob/main/DIR-890L/README.md

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-30521 | CVE-DB