CVE-2015-1187 The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
CriticalCVSS 9.8
EPSS 82.7%
CISA KEV
added 2022-03-25 · due 2022-04-15
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-25
- Due date (FCEB)
- 2022-04-15
- Ransomware use
- Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-626l firmware | = 1.04-b04 | No fix listed |
| dlink dir-636l firmware | = 1.04 | No fix listed |
| dlink dir-808l firmware | = 1.03-b05 | No fix listed |
| dlink dir-810l firmware | = 1.01-b04 | No fix listed |
| dlink dir-810l firmware | = 2.02-b01 | No fix listed |
| dlink dir-820l firmware | = 1.02-b10 | No fix listed |
| dlink dir-820l firmware | = 1.05-b03 | No fix listed |
| dlink dir-820l firmware | = 2.01-b02 | No fix listed |
| dlink dir-826l firmware | = 1.00-b23 | No fix listed |
| dlink dir-830l firmware | = 1.00-b07 | No fix listed |
| dlink dir-836l firmware | = 1.01-b03 | No fix listed |
| trendnet tew-731br firmware | = 2.01-b01 | No fix listed |
| dlink dir-651 firmware | = 1.10na-b02 | No fix listed |
| trendnet tew-651br firmware | All versions | No fix listed |
| trendnet tew-652br firmware | All versions | No fix listed |
| trendnet tew-711br firmware | = 1.00-b31 | No fix listed |
| trendnet tew-810dr firmware | = 1.00-b19 | No fix listed |
| trendnet tew-813dru firmware | = 1.00-b23 | No fix listed |
References
- packetstormsecurity.com issue-tracking third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150302 CVE-2015-1187: D-Link DIR-636L Remote Command Injection - Incorrect Authentication issue-tracking mailing-list third-party-advisory
- securityadvisories.dlink.com vendor-advisory
- 72848 broken-link third-party-advisory vdb-entry
- github.com broken-link issue-tracking mitigation third-party-advisory
- www.cisa.gov government-resource us-government-resource