Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[GreenBay42]

The ZIP file will include 2 firmware files, release notes, and instructions.

Install v1.15 first, reboot, then install 1.20b02, reboot. It is recommended to perform a hard reset (paper clip in reset hole for 10 seconds) after updating.

DO NOT SKIP v1.15. Updating to 1.20B02 directly will not fix all issues.


Firmware - ftp://FTP2.DLINK.COM/PRODUCTS/DIR-885L/REVA/DIR-885L_REVA_FIRMWARE_PATCH_v1.20B02.zip


Release Notes:

• Add Firmware Protection to BIN file and System
• WAN && LAN - XSS exploit  (CVE-2017-14413, CVE-2017-14414, CVE-2017-14415, CVE-2017-14416)
• WAN - Weak Cloud protocol  (CVE-2017-14419, CVE-2017-14420)
• WAN && LAN - Stunnel private keys  (CVE-2017-14422)
• WAN && LAN - Nonce brute forcing for DNS configuration  (CVE-2017-14423)
• Local - Weak files permission and credentials stored in clear text  (CVE-2017-14424, CVE-2017-14425, CVE-2017-14426, CVE-2017-14427, CVE-2017-
  14428)
• LAN – DoS attack against some daemons  (CVE-2017-14430)
• Security fixes to PHP CGI files to mitigate exposing credentials
• Correct stack overflow vulnerability caused by HNAP

[happyhere]

anyone here have applied this new 1.20 firmware?  any feedback or issues?
I am reluctant at the moment as our '885L' is like a prod environment, household will blame me if router becomes unstable

[hydra3333]

rock solid stable here.

[FurryNutz]

Let us know if you update. Please fully read the update instructions before updating your router.

anyone here have applied this new 1.20 firmware?  any feedback or issues?
I am reluctant at the moment as our '885L' is like a prod environment, household will blame me if router becomes unstable

[happyhere]

yes I will update to 1.20 around December break when I have more days to stay in that home having 885L.
I have read instructions from admin to upgrade to 1.15 before 1.20, will follow that

Let us know if you update. Please fully read the update instructions before updating your router.

anyone here have applied this new 1.20 firmware?  any feedback or issues?
I am reluctant at the moment as our '885L' is like a prod environment, household will blame me if router becomes unstable

[FurryNutz]

 

[happyhere]

I will be updating dir-885L to firmware 1.20.
But have some few questions:

1. Do I need a paper clip reset while on transitional firmware 1.15?  Or do a one time reset at 1.20?
2. The router is saying new 1.15 firmware available, can I use that instead of manual upload?
3. Can I downgrade from 1.20 to 1.13 just in case it doesnt work?

[FurryNutz]

I recommend that you use the on board UI and use IE11 or FF browsers only. Do a factory reset first, then manually send the v1.15 file. Once this is sent and should be processed, go in and send the v1.20 file, after this is completed, go in to the UI and do one more factory reset and set up the router from scratch. Be sure to disable any PC security software and browser plug ins while performing this. Also be LAN cable wired to the router with a PC. Do not perform this over the wireless connection!!!
 Link> >FW Update Process

You can downgrade...

Let us know how it goes.

I will be updating dir-885L to firmware 1.20.
But have some few questions:

1. Do I need a paper clip reset while on transitional firmware 1.15?  Or do a one time reset at 1.20?
2. The router is saying new 1.15 firmware available, can I use that instead of manual upload?
3. Can I downgrade from 1.20 to 1.13 just in case it doesnt work?

[happyhere]

Upgrade went well.
I followed the dumb "user friendly" GUI instead of manual upload.

1. On GUI, updated from 1.13 to 1.15.  around 3 minutes
2. On GUI, updated from 1.15 to 1.20.  around 3 minutes

All settings are intact. I haven't done reset, all wired/wireless client are working

I did a power down of 885L and all the networking gear/cam/switch and restarted them.
It is running STABLE for 8 hours now.

There is a question in my mind, is the zero day bug really fixed using the GUI automated way?  I think yes but cant really test it.

[FurryNutz]

Glad you got it working and the processed worked. I presume you used the update feature in the UI to upgrade?

This not a zero day bug. More like a flaw found in the WPA2 code set for client modes. This only effects wireless running in client, bridge or repeater mode mostly. You'll be fine since it's successfully upgraded.

[happyhere]

Yes I used the update feature in UI. 

It seems to fix the delete issue dhcp reservation on prior firmware too.

Anyway, so far so good all stable. 2.4ghz is not dying at least.
Nobody in household noticed a firmware update was made

[FurryNutz]

Good to hear. Glad it's working well now. Enjoy. 

Yes I used the update feature in UI. 

It seems to fix the delete issue dhcp reservation on prior firmware too.

Anyway, so far so good all stable. 2.4ghz is not dying at least.
Nobody in household noticed a firmware update was made

[vitoldo]

On https://support.dlink.com/ProductInfo.aspx?m=DIR-885L%2fR actually I don't see any 1.15 firmware. There are 1.13 and 1.20 but not 1.15.
When I've connected my 885 to WAN the first time router reported the upgrade twice. I performed that automatically from GUI. Probably I've missed the 1.15 (dont't remember). Is that any way to check it? My HW ver. is A2.

[FurryNutz]

If you were able to get v1.20 on the router, then no need for any other version of FW.

On https://support.dlink.com/ProductInfo.aspx?m=DIR-885L%2fR actually I don't see any 1.15 firmware. There are 1.13 and 1.20 but not 1.15.
When I've connected my 885 to WAN the first time router reported the upgrade twice. I performed that automatically from GUI. Probably I've missed the 1.15 (dont't remember). Is that any way to check it? My HW ver. is A2.

[vitoldo]

Thanks for quick reply. So I'm waiting for final 1.21.