Evil-DB LogoEvil-DB
← All CVEs

CVE-2015-1187

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

The impacted product is end-of-life and should be disconnected if still in use.

Added 2022-03-25Remediation due 2022-04-15

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

9.8
CVSS
82.9%
EPSS (exploit prob.)
100th
EPSS percentile
2017-09-21
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

VendorProductAffected versions
dlinkdir-626l_firmware1.04
dlinkdir-626lall versions
dlinkdir-636l_firmware1.04
dlinkdir-636lall versions
dlinkdir-808l_firmware1.03
dlinkdir-808lall versions
dlinkdir-810l_firmware1.01
dlinkdir-810lall versions
dlinkdir-810l_firmware2.02
dlinkdir-810lall versions
dlinkdir-820l_firmware1.02
dlinkdir-820lall versions
dlinkdir-820l_firmware1.05
dlinkdir-820lall versions
dlinkdir-820l_firmware2.01
dlinkdir-820lall versions
dlinkdir-826l_firmware1.00
dlinkdir-826lall versions
dlinkdir-830l_firmware1.00
dlinkdir-830lall versions
dlinkdir-836l_firmware1.01
dlinkdir-836lall versions
trendnettew-731br_firmware2.01
trendnettew-731brall versions
dlinkdir-651_firmware1.10na
dlinkdir-651all versions
trendnettew-651br_firmwareall versions
trendnettew-651brall versions
trendnettew-652br_firmwareall versions
trendnettew-652brall versions
trendnettew-711br_firmware1.00
trendnettew-711brall versions
trendnettew-810dr_firmware1.00
trendnettew-810drall versions
trendnettew-813dru_firmware1.00
trendnettew-813druall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2015-1187