Read the docs
TI-2022-12678 Aliases CVE-2022-30521GHSA-37gv-mrx7-gfqg

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in…

Priority MEDIUM 58CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters given by HTTP header and can be controlled by users easily. The attackers can exploit the vulnerability to carry out arbitrary code by means of sending a specially constructed payload to port 49152.

Why it matters now

EPSS 0.15122 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dir-890l_firmware:*:*:*:*:*:*:*:*up to 1.07b09VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-890l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-890l_firmware:*:*:*:*:*:*:*:* Versions up to 1.07b09 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-890l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-30521
  2. 2026-10-03 Alias added: GHSA-37gv-mrx7-gfqg

References

Exploit 1

Advisory 1

Other 1

  • TI-2019-13149 The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01… KEVCVSS 3.1CRITICAL 9.8
  • TI-2016-05627 D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action CVSS 3.0CRITICAL 9.8
  • TI-2022-12147 D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded… CVSS 3.1HIGH 8.8
  • TI-2023-14119 D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass. CVSS 3.1HIGH 7.5
  • TI-2025-03869 D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection CVSS 4.0MEDIUM 5.3
  • TI-2017-10971 Certain D-Link products are affected by: Buffer Overflow. CVSS 3.1CRITICAL 9.8
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences