| D-Link DIR-850L | ||
|---|---|---|
|
Security Grade
Calculator v
|
D-Link DIR-850L
Brand: D-Link (Parent: D-Link Corporation) Category: Router • Model / Gen: DIR-850L Release Date: 2013-05-01 • Status: End of life Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | 🔗 Proof | Physical tampering not the primary risk. |
| Known vulnerabilities | Very common | 🔗 Proof | 30+ CVEs: CVE-2017-14429 (9.8), CVE-2016-5681 RCE, CVE-2017-14421 hardcoded password. |
| Prior attacks | Very common | 🔗 Proof | Targeted by Mirai variants (FICORA, MooBot, CAPSAICIN); AryStinger infections ~75% DIR-850L. |
| Updatability | None | 🔗 Proof | End-of-life; no further firmware updates. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | 🔗 Proof | HNAP interface authentication bypass (CVE-2017-3193). |
| Communications | No encryption | 🔗 Proof | Web admin and HNAP run over plaintext HTTP. |
| Storage | No encryption | 🔗 Proof | Hardcoded root credential wrgac25_dlink.2013gui_dir850l in firmware. |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | 🔗 Proof | Single admin account with limited management. |
| Authentication | Absent | 🔗 Proof | Hardcoded credentials and authentication bypass. |
| Brute-force protection | Absent | 🔗 Proof | No login rate limiting. |
| Event logging | Partial logging | 🔗 Proof | Basic system logs only. |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Default/factory passwords and hardcoded credentials. |
| Category Score | Score: 3 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | D-Link firmware (Linux-based) (Companion App: mydlink app) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: Flash + USB storage |
| Power, Battery & Charging | Battery: • Power: 12 V DC adapter • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: Wi-Fi 802.11ac, Gigabit Ethernet, USB |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
DIR-850L is an end-of-life router with 30+ CVEs, hardcoded credentials and a long history as a Mirai-variant botnet target (AryStinger infections ~75% DIR-850L). No updates will ever arrive, making it the worst-scoring device here.
