Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[GreenBay42]

A firmware patch has been released.

Firmware --> ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DNR-202L/REVA/DNR-202L_REVA_FIRMWARE_PATCH_v2.05.01.zip

Release Notes:

Vulnerability ID: CVE-2012-5958   

Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string that is not properly handled after a certain pointer subtraction.

[nukemedic]

Glad to hear that security is being maintained. 

But I noticed that the button and tab descriptions all seem incorrect now - looks like variable names are being used instead of labels?

[FurryNutz]

Please give a example of what your seeing or screen capture please.
Adding Screenshots In A Post

What browser are you using?

Glad to hear that security is being maintained. 

But I noticed that the button and tab descriptions all seem incorrect now - looks like variable names are being used instead of labels?

[nukemedic]

latest safari on mac running sierra (not high sierra yet)

this is the first page, all pages are like this, settings pages even worse

[FurryNutz]

Ok, I can confirm this as well:


Grammer Check:


Seen in both Safari and FF ESR (v52)

I'll pass this one to D-Link for review.

[RYAT3]

Are your months there?

https://www.screencast.com/t/lAqGr2xzx

[FurryNutz]

There are a few UI issues i've found. I've passed this long to D-Link for review. I presume they will have a look at this Monday.

If you need too, you could revert back to v2.04. I presume this issue will take some time before we see a fixed release. 

Are your months there?

https://www.screencast.com/t/lAqGr2xzx

[RYAT3]

There are a few UI issues i've found. I've passed this long to D-Link for review. I presume they will have a look at this Monday.

If you need too, you could revert back to v2.04. I presume this issue will take some time before we see a fixed release. 

Are your months there?

https://www.screencast.com/t/lAqGr2xzx

2.04.03 is where it started for me.

I'm curious on your mac, specifically:  Are your months missing in playback?

Have you tried to reinstall 2.05?

[FurryNutz]

Looks like this issue was reproduced at D-Link and is now under review for fix. Hopefully soon. Please be patient. 

[magarity]

I've been using this patch for a while now and it works without any problem except the UI has all this goofy sample text instead of real menu values such as "System Restart Btn" for reset after setting change button.  Pretty much all the menu items are labeled in Java style camelCase. I can figure them out since I do software development but to release this to customers like this is kind of sad. Please polish it off and release an official update since this patch isn't even what comes up when going through the DLink website's "find updates".

[GreenBay42]

Sorry 10 days later....

Is this in the DNR-202L UI or mydlink.com?

What browser(s) are you using? 

We installed the 2.05 firmware and the web UI is OK in IE11. Going to test other browsers later today.

Also, BETA firmware are not pushed through the mydlink server.

[wifilink]

Why isn't this firmware update on the D-Link support page for this product? It is still showing version 2.04.03

http://support.dlink.ca/ProductInfo.aspx?m=DNR-202L

[FurryNutz]

You'll need to contact D-Link Canada about that. The update file listed here is for the USA. However is available for use for Canadian users to try.
USA and Canada handle there own files and support sites.

Why isn't this firmware update on the D-Link support page for this product? It is still showing version 2.04.03

http://support.dlink.ca/ProductInfo.aspx?m=DNR-202L

[GreenBay42]

D-Link Canada discontinued this product a while ago but should be posting security firmware (unless they found issues with it and removed it). I will contact them tomorrow morning.

[FurryNutz]

Thank you Sir.