CVE-2015-1187
CriticalActively exploited (CISA KEV)
Description
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
SeverityCritical
CVSS9.8
Exploit probability—
ProductD-Link and TRENDnet Multiple Devices
PublishedSep 21, 2017
First seenSep 21, 2017
Added to KEVMar 25, 2022
Weakness typeCWE-287Improper authentication
How to fix
CISA required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date: Apr 15, 2022Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dlink dir-626l_firmware | 1.04 | — |
| dlink dir-636l_firmware | 1.04 | — |
| dlink dir-808l_firmware | 1.03 | — |
| dlink dir-810l_firmware | 1.01, 2.02 | — |
| dlink dir-820l_firmware | 1.02, 1.05, 2.01 | — |
| dlink dir-826l_firmware | 1.00 | — |
| dlink dir-830l_firmware | 1.00 | — |
| dlink dir-836l_firmware | 1.01 | — |
| trendnet tew-731br_firmware | 2.01 | — |
| dlink dir-651_firmware | 1.10na | — |
| trendnet tew-651br_firmware | No range specified | — |
| trendnet tew-652br_firmware | No range specified | — |
| trendnet tew-711br_firmware | 1.00 | — |
| trendnet tew-810dr_firmware | 1.00 | — |
| trendnet tew-813dru_firmware | 1.00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.