CVE-2015-1187
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
Yes
*KEV
Decision
-
*SSVC
Descriptions
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
La herramienta de ping en múltiples dispositivos D-Link y TRENDnet permite que los atacantes remotos ejecuten código arbitrario mediante el parámetro ping_addr a ping.ccp.
D-Link DIR636L suffers from a remote command injection vulnerability.
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-17 CVE Reserved
- 2015-02-26 First Exploit
- 2015-03-02 CVE Published
- 2022-03-25 Exploited in Wild
- 2022-04-15 KEV Due Date
- 2024-08-06 CVE Updated
- 2024-10-03 EPSS Updated
CWE
- CWE-287: Improper Authentication
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html | Issue Tracking |
|
| http://seclists.org/fulldisclosure/2015/Mar/15 | Issue Tracking |
|
| http://www.securityfocus.com/bid/72848 | Third Party Advisory | |
| https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2 | Issue Tracking | |
| https://seclists.org/fulldisclosure/2015/Mar/15 |
|
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/41677 | 2015-02-26 | |
| http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dlink Search vendor "Dlink" | Dir-626l Firmware Search vendor "Dlink" for product "Dir-626l Firmware" | 1.04 Search vendor "Dlink" for product "Dir-626l Firmware" and version "1.04" | b04 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-626l Search vendor "Dlink" for product "Dir-626l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-636l Firmware Search vendor "Dlink" for product "Dir-636l Firmware" | 1.04 Search vendor "Dlink" for product "Dir-636l Firmware" and version "1.04" | - |
Affected
| in | Dlink Search vendor "Dlink" | Dir-636l Search vendor "Dlink" for product "Dir-636l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-808l Firmware Search vendor "Dlink" for product "Dir-808l Firmware" | 1.03 Search vendor "Dlink" for product "Dir-808l Firmware" and version "1.03" | b05 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-808l Search vendor "Dlink" for product "Dir-808l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-810l Firmware Search vendor "Dlink" for product "Dir-810l Firmware" | 1.01 Search vendor "Dlink" for product "Dir-810l Firmware" and version "1.01" | b04 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-810l Search vendor "Dlink" for product "Dir-810l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-810l Firmware Search vendor "Dlink" for product "Dir-810l Firmware" | 2.02 Search vendor "Dlink" for product "Dir-810l Firmware" and version "2.02" | b01 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-810l Search vendor "Dlink" for product "Dir-810l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-820l Firmware Search vendor "Dlink" for product "Dir-820l Firmware" | 1.02 Search vendor "Dlink" for product "Dir-820l Firmware" and version "1.02" | b10 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-820l Search vendor "Dlink" for product "Dir-820l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-820l Firmware Search vendor "Dlink" for product "Dir-820l Firmware" | 1.05 Search vendor "Dlink" for product "Dir-820l Firmware" and version "1.05" | b03 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-820l Search vendor "Dlink" for product "Dir-820l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-820l Firmware Search vendor "Dlink" for product "Dir-820l Firmware" | 2.01 Search vendor "Dlink" for product "Dir-820l Firmware" and version "2.01" | b02 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-820l Search vendor "Dlink" for product "Dir-820l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-826l Firmware Search vendor "Dlink" for product "Dir-826l Firmware" | 1.00 Search vendor "Dlink" for product "Dir-826l Firmware" and version "1.00" | b23 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-826l Search vendor "Dlink" for product "Dir-826l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-830l Firmware Search vendor "Dlink" for product "Dir-830l Firmware" | 1.00 Search vendor "Dlink" for product "Dir-830l Firmware" and version "1.00" | b07 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-830l Search vendor "Dlink" for product "Dir-830l" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-836l Firmware Search vendor "Dlink" for product "Dir-836l Firmware" | 1.01 Search vendor "Dlink" for product "Dir-836l Firmware" and version "1.01" | b03 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-836l Search vendor "Dlink" for product "Dir-836l" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-731br Firmware Search vendor "Trendnet" for product "Tew-731br Firmware" | 2.01 Search vendor "Trendnet" for product "Tew-731br Firmware" and version "2.01" | b01 |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-731br Search vendor "Trendnet" for product "Tew-731br" | - | - |
Safe
|
| Dlink Search vendor "Dlink" | Dir-651 Firmware Search vendor "Dlink" for product "Dir-651 Firmware" | 1.10na Search vendor "Dlink" for product "Dir-651 Firmware" and version "1.10na" | b02 |
Affected
| in | Dlink Search vendor "Dlink" | Dir-651 Search vendor "Dlink" for product "Dir-651" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-651br Firmware Search vendor "Trendnet" for product "Tew-651br Firmware" | - | - |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-651br Search vendor "Trendnet" for product "Tew-651br" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-652br Firmware Search vendor "Trendnet" for product "Tew-652br Firmware" | - | - |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-652br Search vendor "Trendnet" for product "Tew-652br" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-711br Firmware Search vendor "Trendnet" for product "Tew-711br Firmware" | 1.00 Search vendor "Trendnet" for product "Tew-711br Firmware" and version "1.00" | b31 |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-711br Search vendor "Trendnet" for product "Tew-711br" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-810dr Firmware Search vendor "Trendnet" for product "Tew-810dr Firmware" | 1.00 Search vendor "Trendnet" for product "Tew-810dr Firmware" and version "1.00" | b19 |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-810dr Search vendor "Trendnet" for product "Tew-810dr" | - | - |
Safe
|
| Trendnet Search vendor "Trendnet" | Tew-813dru Firmware Search vendor "Trendnet" for product "Tew-813dru Firmware" | 1.00 Search vendor "Trendnet" for product "Tew-813dru Firmware" and version "1.00" | b23 |
Affected
| in | Trendnet Search vendor "Trendnet" | Tew-813dru Search vendor "Trendnet" for product "Tew-813dru" | - | - |
Safe
|