CVE-2023-30063

The D-Link DIR-890L router on firmware FW1.10 A1 has an authentication bypass. The metrics point to a confidentiality-focused outcome reached remotely without credentials or user interaction, an attacker sidesteps the login and gains access they shouldn't have. The description is sparse, but the shape is a remote, unauthenticated bypass of the device's authentication on a consumer-grade router.

Consumer routers are perennial botnet targets, and auth bypass is a favored bug class because it opens the management interface without any credential work; mass scanners sweep for exposed router admin panels continuously. The DIR-890L is an older high-end home router, and gear in that category frequently reaches end-of-support, which means fixes may be limited and exposed units accumulate over time as evergreen targets.

Our lever is exposure and lifecycle. We would look for any DIR-890L with its management interface reachable from the WAN side, get that access closed off, and treat the device's support status as part of the decision, an unsupported router with a remote auth bypass is a replacement candidate, not just a patch ticket. For consumer edge gear, removing internet reachability of the admin plane is the highest-value action.