CVE-2015-1187
CRITICAL(9.8)KEVWahrscheinlich ausgenutzt
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
Beschreibung
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
KEV-Informationen
CVSS-Score
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HIm Rechner öffnenBetroffene Produkte
| Hersteller | Produkt | Version |
|---|---|---|
| dlink | dir-626l firmware | 1.04 |
| dlink | dir-636l firmware | 1.04 |
| dlink | dir-808l firmware | 1.03 |
| dlink | dir-810l firmware | 1.01; 2.02 |
| dlink | dir-820l firmware | 1.02; 1.05; 2.01 |
| dlink | dir-826l firmware | 1.00 |
| dlink | dir-830l firmware | 1.00 |
| dlink | dir-836l firmware | 1.01 |
| trendnet | tew-731br firmware | 2.01 |
| dlink | dir-651 firmware | 1.10na |
| trendnet | tew-651br firmware | - |
| trendnet | tew-652br firmware | - |
| trendnet | tew-711br firmware | 1.00 |
| trendnet | tew-810dr firmware | 1.00 |
| trendnet | tew-813dru firmware | 1.00 |
Mehrere CVSS-Bewertungen
Quelle: [email protected](Primary)
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Quelle: 134c704f-9b21-4f2e-91b3-4a467353bcc0(Secondary)
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Referenzen
- http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html(Issue Tracking, Third Party Advisory, VDB Entry)
- http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html(Exploit, Third Party Advisory, VDB Entry)
- http://seclists.org/fulldisclosure/2015/Mar/15(Issue Tracking, Mailing List, Third Party Advisory)
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052(Vendor Advisory)
- http://www.securityfocus.com/bid/72848(Broken Link, Third Party Advisory, VDB Entry)
- https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2(Broken Link, Issue Tracking, Mitigation, Third Party Advisory)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1187(US Government Resource)
Hilfe beim Schwachstellenmanagement?
Unsere Sicherheitsexperten helfen Ihnen bei der Priorisierung und Behebung von Schwachstellen.