TROYANOSYVIRUS
Retour aux CVEs

CVE-2015-1187

CRITICALCISA KEV
9.8

Description

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Details CVE

Score CVSS v3.19.8
SeveriteCRITICAL
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie9/21/2017
Derniere modification4/21/2026
Sourcekev
Observations honeypot0

CISA KEV

FournisseurD-Link and TRENDnet
ProduitMultiple Devices
Nom vulnerabiliteD-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
Date ajout KEV2022-03-25
Date limite remediation2022-04-15
Utilise dans ransomwareUnknown

Produits affectes

dlink:dir-626ldlink:dir-626l_firmwaredlink:dir-636ldlink:dir-636l_firmwaredlink:dir-651dlink:dir-651_firmwaredlink:dir-808ldlink:dir-808l_firmwaredlink:dir-810ldlink:dir-810l_firmwaredlink:dir-820ldlink:dir-820l_firmwaredlink:dir-826ldlink:dir-826l_firmwaredlink:dir-830ldlink:dir-830l_firmwaredlink:dir-836ldlink:dir-836l_firmwaretrendnet:tew-651brtrendnet:tew-651br_firmwaretrendnet:tew-652brtrendnet:tew-652br_firmwaretrendnet:tew-711brtrendnet:tew-711br_firmwaretrendnet:tew-731brtrendnet:tew-731br_firmwaretrendnet:tew-810drtrendnet:tew-810dr_firmwaretrendnet:tew-813drutrendnet:tew-813dru_firmware

Faiblesses (CWE)

CWE-287CWE-287

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.