What’s Vulnerable › Vulnerabilities
CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2022-03-25
- EPSS: 82.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-09-21 · updated 2026-06-17
- Weakness: CWE-287
Description
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
Affected products
- Dlink Dir-626L Firmware: 1.04-b04
- Dlink Dir-636L Firmware: 1.04
- Dlink Dir-651 Firmware: 1.10na-b02
- Dlink Dir-808L Firmware: 1.03-b05
- Dlink Dir-810L Firmware: 1.01-b04, 2.02-b01
- Dlink Dir-820L Firmware: 1.02-b10, 1.05-b03, 2.01-b02
- Dlink Dir-826L Firmware: 1.00-b23
- Dlink Dir-830L Firmware: 1.00-b07
- Dlink Dir-836L Firmware: 1.01-b03
- TRENDnet Tew-651Br Firmware: all versions
- TRENDnet Tew-652Br Firmware: all versions
- TRENDnet Tew-711Br Firmware: 1.00-b31
- TRENDnet Tew-731Br Firmware: 2.01-b01
- TRENDnet Tew-810Dr Firmware: 1.00-b19
- TRENDnet Tew-813Dru Firmware: 1.00-b23
References
- http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html
- http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html
- http://seclists.org/fulldisclosure/2015/Mar/15
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052
- http://www.securityfocus.com/bid/72848
- https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2
- http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html
- http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html
- http://seclists.org/fulldisclosure/2015/Mar/15
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052
- http://www.securityfocus.com/bid/72848
- https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2
Get alerted when CVE-2015-1187 or the next vulnerability affects your stack