# MA-683.092017: MyCERT Advisory - Multiple Security Vulnerabilities Affecting D-Link DIR-800 Series Routers

**Date:** 19 Sep 2017  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-683.092017  
**Advisory ID:** MA-683.092017

---

**1.0    Introduction**
MyCERT has received information from valid sources regarding publicly disclosed details of multiple security vulnerabilities affecting D-Link DIR-800 series routers.
**2.0    Impact**
Routers can be compromised to install malicious firmware, as well as compromise user’s information.
**3.0    Affected Products**
•    D-Link DIR-850L
•    D-Link DIR-885L
•    D-Link DIR-890L
•    D-Link DIR-895L
**4.0 Recommendation**
D-Link has issued firmware update for DIR-850L on their website. Users and administrators are recommended to review the URL below and apply necessary updates:
•    <http://www.dlink.com.my/dir-850l-msia/#firmware>
For other series, kindly refer the workaround below:
**Workarounds:**
Users are advised to go to D-Link support website to get updates about the remaining series of the router.
Until a firmware update is available, users should take the following steps in the meantime to minimize the risk of your router being compromised.
- Disable remote management.
- Use strong passwords for your WIFI to reduce the risk of unauthorized access to your network.
- Change the device’s administrator password. Be sure to use a strong new password.
Users should also consider disabling the router’s SharePort feature. Below are the URL for the instructions:
<ftp://ftp2.dlink.com/PRODUCTS/DIR-850L/REVB/DIR-850L_REVB_MANUAL_2.00_EN_US.PDF>
DIR-885L:
<ftp://ftp.dlink.ca/PRODUCTS/DIR-885L/DIR-885L_REVA_MANUAL_1.00_EN.PDF>
DIR-890L:
<ftp://ftp2.dlink.com/PRODUCTS/DIR-890L/REVA/DIR-890L_REVA_MANUAL_1.00_EN_US.PDF>
DIR-895L:
<http://global.dlink.com.sg/site_support/DIR-895L/Manual/DIR-895L_A1_Manual_v1.pdf>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor, apply necessary updates and follow best practice security policies.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#65061c0700175c5c5c25061c07001716000610170c111c4b081c) or [[email protected]](/cdn-cgi/l/email-protection#a5c8dcc6c0d7d1e5c8dcc6c0d7d18bcad7c28bc8dc)
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0    References**
- <http://www.dlink.com.sg/securityadvisory/>
- <https://www.csa.gov.sg/singcert/news/advisories-alerts/advisory-on-multiple-security-vulnerabilities-affecting-d-link-dir-800-series-routers>
- <https://www.lowyat.net/2017/142166/dlink-unifi-time-router-risk/>
- <http://www.dlink.com.my/dir-850l-msia/#firmware>