CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-09-21
D-Link and TRENDnet Routers ping.ccp Remote Command Injection Vulnerability (CVE-2015-1187) Analysis and Mitigation Guide
[Affected Scope] Multiple D-Link (including DIR-636L) and TRENDnet devices utilizing the ncc service
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with system privileges via the ping_addr parameter in ping.ccp
[Mitigation] Immediately update to the latest secure firmware version and disable external WAN management access