The Graveyard - Products No Longer Supported > DIR-885L

Firmware 1.20B02 Released - SECURITY PATCH

(1/3) > >>

GreenBay42:
The ZIP file will include 2 firmware files, release notes, and instructions.

Install v1.15 first, reboot, then install 1.20b02, reboot. It is recommended to perform a hard reset (paper clip in reset hole for 10 seconds) after updating.

DO NOT SKIP v1.15. Updating to 1.20B02 directly will not fix all issues.


Firmware - ftp://FTP2.DLINK.COM/PRODUCTS/DIR-885L/REVA/DIR-885L_REVA_FIRMWARE_PATCH_v1.20B02.zip


Release Notes:


* Add Firmware Protection to BIN file and System
* WAN && LAN - XSS exploit  (CVE-2017-14413, CVE-2017-14414, CVE-2017-14415, CVE-2017-14416)
* WAN - Weak Cloud protocol  (CVE-2017-14419, CVE-2017-14420)
* WAN && LAN - Stunnel private keys  (CVE-2017-14422)
* WAN && LAN - Nonce brute forcing for DNS configuration  (CVE-2017-14423)
* Local - Weak files permission and credentials stored in clear text  (CVE-2017-14424, CVE-2017-14425, CVE-2017-14426, CVE-2017-14427, CVE-2017-
14428)
* LAN – DoS attack against some daemons  (CVE-2017-14430)
* Security fixes to PHP CGI files to mitigate exposing credentials
* Correct stack overflow vulnerability caused by HNAP

happyhere:

anyone here have applied this new 1.20 firmware?  any feedback or issues?
I am reluctant at the moment as our '885L' is like a prod environment, household will blame me if router becomes unstable :)

hydra3333:
rock solid stable here.

FurryNutz:
Let us know if you update. Please fully read the update instructions before updating your router.


--- Quote from: revogsx on November 10, 2017, 10:31:46 PM ---
anyone here have applied this new 1.20 firmware?  any feedback or issues?
I am reluctant at the moment as our '885L' is like a prod environment, household will blame me if router becomes unstable :)

--- End quote ---

happyhere:

yes I will update to 1.20 around December break when I have more days to stay in that home having 885L.
I have read instructions from admin to upgrade to 1.15 before 1.20, will follow that :)


--- Quote from: FurryNutz on November 11, 2017, 11:37:57 AM ---Let us know if you update. Please fully read the update instructions before updating your router.


--- Quote from: revogsx on November 10, 2017, 10:31:46 PM ---
anyone here have applied this new 1.20 firmware?  any feedback or issues?
I am reluctant at the moment as our '885L' is like a prod environment, household will blame me if router becomes unstable :)

--- End quote ---

--- End quote ---

Navigation

[0] Message Index

[#] Next page