CVE-2015-1187

CRITICALCISA KEV

9.8

Descricao

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado9/21/2017

Ultima modificacao4/21/2026

Fontekev

Avistamentos honeypot0

CISA KEV

FornecedorD-Link and TRENDnet

ProdutoMultiple Devices

Nome da vulnerabilidadeD-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

Data inclusao KEV2022-03-25

Prazo de remediacao2022-04-15

Uso em ransomwareUnknown

Produtos afetados

dlink:dir-626ldlink:dir-626l_firmwaredlink:dir-636ldlink:dir-636l_firmwaredlink:dir-651dlink:dir-651_firmwaredlink:dir-808ldlink:dir-808l_firmwaredlink:dir-810ldlink:dir-810l_firmwaredlink:dir-820ldlink:dir-820l_firmwaredlink:dir-826ldlink:dir-826l_firmwaredlink:dir-830ldlink:dir-830l_firmwaredlink:dir-836ldlink:dir-836l_firmwaretrendnet:tew-651brtrendnet:tew-651br_firmwaretrendnet:tew-652brtrendnet:tew-652br_firmwaretrendnet:tew-711brtrendnet:tew-711br_firmwaretrendnet:tew-731brtrendnet:tew-731br_firmwaretrendnet:tew-810drtrendnet:tew-810dr_firmwaretrendnet:tew-813drutrendnet:tew-813dru_firmware