CVE-2015-1187

CRITICALCISA KEV

9.8

Description

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/21/2017

Last Modified4/21/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorD-Link and TRENDnet

ProductMultiple Devices

Vulnerability NameD-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

KEV Date Added2022-03-25

Remediation Due Date2022-04-15

Ransomware UseUnknown

Affected Products

dlink:dir-626ldlink:dir-626l_firmwaredlink:dir-636ldlink:dir-636l_firmwaredlink:dir-651dlink:dir-651_firmwaredlink:dir-808ldlink:dir-808l_firmwaredlink:dir-810ldlink:dir-810l_firmwaredlink:dir-820ldlink:dir-820l_firmwaredlink:dir-826ldlink:dir-826l_firmwaredlink:dir-830ldlink:dir-830l_firmwaredlink:dir-836ldlink:dir-836l_firmwaretrendnet:tew-651brtrendnet:tew-651br_firmwaretrendnet:tew-652brtrendnet:tew-652br_firmwaretrendnet:tew-711brtrendnet:tew-711br_firmwaretrendnet:tew-731brtrendnet:tew-731br_firmwaretrendnet:tew-810drtrendnet:tew-810dr_firmwaretrendnet:tew-813drutrendnet:tew-813dru_firmware