Analysis Summary

CVE-2025-8231 CVSS:6.8

A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-8175 CVSS:6.5

D-Link DI-8400 is vulnerable to a denial of service, caused by a NULL pointer dereference in file usb_paswd.asp of the component jhttpd.

Impact

• Denial of Service
• Gain Access

Indicators of Compromise

CVE

• CVE-2025-8231

• CVE-2025-8175

Affected Vendors

Remediation

Refer to the D-Link Website for patch, upgrade, or suggested workaround information.

CVE-2025-8231

CVE-2025-8175