Pubblicato firmware DIR-860L B1 2.04_BETA build 04-01_ic5b 20181205.
DIR-860L Firmware Patch Notes
Firmware: 2.04B04_ic5b_BETA
Hardware: Bx
Date: January 4, 2019
Overview:
In November 2018, D-Link became aware of a 3rd Party security researcher that
accused the DIR-860L Hardware Rev. Bx and DIR-818LW Series Hardware Revision
Ax consumer routers of a remote command injection vulnerability.
After an investigation, this vulnerability is only accessible via the local-network (LAN-
side) of the router and not directly from the Internet (WAN-side) since it requires access
to the web browser configuration of the router.
3rd Party Report:
MinGeun Kim (pr0v3rbs _at_ kaist.ac.kr)
https://github.com/pr0v3rbs/CVE/tree/master/CVE-2018-20114
Problems Resolved:
CVE-2018-20114 - Unauthenticated OS Command Injection
DISCLAIMER: Please note that this is a device beta software, beta firmware, or hot-fix release which is
still undergoing final testing before its official release. The beta software, beta firmware, or hot-fix is
provided on an “as is” and “as available” basis and the user assumes all risk and liability for use thereof.
D-Link does not provide any warranties, whether express or implied, as to the suitability or usability of the
beta firmware. D-Link will not be liable for any loss, whether such loss is direct, indirect, special or
consequential, suffered by any party as a result of their use of the beta firmware.
