Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[FurryNutz]

Firmware:   v1.20 Build 02 Beta 01   12/21/18   NA Region!
Revision Info:   
Problems Resolved:
Report: A research report to D-Link has reported multiple routers (DIR-850L A1/B1, DIR-822 C1 and DIR-880L A1) with security vulnerabilities: Authenticated bypass and Authenticated RCE. 3rd Party Researcher: Henry Huang (happyholic1203 at gmail dot com)
1.Authentication bypass
2.Authenticated RCE

Enhancements:
None

Get it here:
NA Region:
DIR-880L

Follow the >FW Update Process

Let us know how it works for you...

[Mark_KF8RV]

I think you made a typo.  The version number should be v1.20..?

Mark

[FurryNutz]

Thank you Sir. Corrected. 

[square_eyes]

So... what's the risk? Is it from LAN only or WAN with remote access enabled? Or WAN... even with remote disabled?

[square_eyes]

I'm having weird issues with this firmware. Now when I save a static IP 192.168.0.x it saves as 192.168.7.x

Add this to issues saving static routes or trying to save a new subnet mask 

[FurryNutz]

How do you mean? Saving a reservation for an IP address for a device ON the router?

I'm having weird issues with this firmware. Now when I save a static IP 192.168.0.x it saves as 192.168.7.x

Add this to issues saving static routes or trying to save a new subnet mask 

[FurryNutz]

I just checked my 880L. Setting up an IP address reservation for a PC that's wired I set for 192.168.0.159. IP address appears correctly and the same after a reboot of the router. v1.20 is loaded.

[square_eyes]

Looking at this - Previously reserved addresses, on machines that were offline changed to the .7.x subnet.

https://imgur.com/a/KCwj7MD

Changing to .0.x while they are still offline and the static address fails to save and goes back to .7.x

Turning the device on, and it seems to get a correct address from DHCP.

[FurryNutz]

Odd for sure. Glad it's working though. 

[CalJake47]

I just can't get the upgrade to this version to work.  I've followed the directions (I've upgraded the firmware in the past without issue).  Every time I try, it goes to "uploading firmware", then followed by "Firmware upgrade failed."  I've tried 3 browsers (IE 11, Firefox 72.01, and Vivaldi 2.10.1745.23) from a Win 7 box, and Firefox 72.01 from a Ubuntu 18.04.  I know there isn't much info here, but I'm out of ideas.

Should there be two bin files in the zip file, like the other previous ones?  There's only one bin file in the zip file:  DIR880A1_FW120b02_beta01_20181221_icl9.bin

[FurryNutz]

Try downloading this file to see if there are two files with in the .zip file:
ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-880L/REVA/DIR-880L_REVA_FIRMWARE_PATCH_v1.20B01_01_i3se_BETA.zip

[CalJake47]

Thanks FurryNutz.  I proceeded through the V1.20B01_01_i3se_Beta, which worked fine (two *.bin files), then onto the 1.20 Build 02 beta, which I was then able to upload.  So happily now at 1.20, build 2 beta.

Thanks again for the help.

[FurryNutz]

Enjoy. 

[FurryNutz]

FYI:
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10189

[FurryNutz]

Please find all legacy FW files for the DIR-880L here:
https://legacy.us.dlink.com

This thread is now close.

Good Luck.