CVE-2015-1187
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Analyzed - cve@mitre.org
- Published
- 2017-09-21
- Last modified
- 2025-10-21
- Known exploited (CISA KEV)
- since 2022-03-25, action due 2022-04-15: The impacted product is end-of-life and should be disconnected if still in use.
- Weaknesses
- CWE-287
Affected products
- Dir-626l Firmware (Dlink)
- Dir-636l Firmware (Dlink)
- Dir-651 Firmware (Dlink)
- Dir-808l Firmware (Dlink)
- Dir-810l Firmware (Dlink)
- Dir-820l Firmware (Dlink)
- Dir-826l Firmware (Dlink)
- Dir-830l Firmware (Dlink)
- Dir-836l Firmware (Dlink)
- Tew-651br Firmware (Trendnet)
- Tew-652br Firmware (Trendnet)
- Tew-711br Firmware (Trendnet)
- Tew-731br Firmware (Trendnet)
- Tew-810dr Firmware (Trendnet)
- Tew-813dru Firmware (Trendnet)
References
- http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html
- http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html
- http://seclists.org/fulldisclosure/2015/Mar/15
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052
- http://www.securityfocus.com/bid/72848
- https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1187
