CVE-2015-1187

CRITICALCISA KEV

9.8

Descripcion

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado9/21/2017

Ultima modificacion4/21/2026

Fuentekev

Avistamientos honeypot0

CISA KEV

VendedorD-Link and TRENDnet

ProductoMultiple Devices

Nombre vulnerabilidadD-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

Fecha inclusion KEV2022-03-25

Fecha limite remediacion2022-04-15

Uso en ransomwareUnknown

Productos afectados

dlink:dir-626ldlink:dir-626l_firmwaredlink:dir-636ldlink:dir-636l_firmwaredlink:dir-651dlink:dir-651_firmwaredlink:dir-808ldlink:dir-808l_firmwaredlink:dir-810ldlink:dir-810l_firmwaredlink:dir-820ldlink:dir-820l_firmwaredlink:dir-826ldlink:dir-826l_firmwaredlink:dir-830ldlink:dir-830l_firmwaredlink:dir-836ldlink:dir-836l_firmwaretrendnet:tew-651brtrendnet:tew-651br_firmwaretrendnet:tew-652brtrendnet:tew-652br_firmwaretrendnet:tew-711brtrendnet:tew-711br_firmwaretrendnet:tew-731brtrendnet:tew-731br_firmwaretrendnet:tew-810drtrendnet:tew-810dr_firmwaretrendnet:tew-813drutrendnet:tew-813dru_firmware