CVE-2015-1187
published 2017-09-21CVE-2015-1187: The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
KEVITWEXPLOIT
CISA Known Exploited Vulnerabilitydue 2022-04-15
Exploited in the wild
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dlink | dir-626l_firmware | — | — |
| dlink | dir-636l_firmware | — | — |
| dlink | dir-651_firmware | — | — |
| dlink | dir-808l_firmware | — | — |
| dlink | dir-810l_firmware | — | — |
| dlink | dir-810l_firmware | — | — |
| dlink | dir-820l_firmware | — | — |
| dlink | dir-820l_firmware | — | — |
| dlink | dir-820l_firmware | — | — |
| dlink | dir-826l_firmware | — | — |
| dlink | dir-830l_firmware | — | — |
| dlink | dir-836l_firmware | — | — |
| trendnet | tew-711br_firmware | — | — |
| trendnet | tew-731br_firmware | — | — |
| trendnet | tew-810dr_firmware | — | — |
| trendnet | tew-813dru_firmware | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vulncheck9.8CRITICAL
cisa9.8CRITICAL