D-Link DIR-890L Hard-Coded Credentials Vulnerability in UART Port

A critical vulnerability exists in the D-Link DIR-890L router, affecting versions through DIR890LA1_FW111b04. The issue arises from hard-coded credentials embedded in the 'rgbin' binary, specifically for UART port authentication. This vulnerability allows users with physical access to the device to log into the UART port and gain root privileges.

Impact

Exploitation of this vulnerability allows for unauthorized access to the device's UART port, where hard-coded credentials can be used to gain root privileges on the router.