ByteOS Network

Vulnerability Details :

CVE-2015-1187

Summary

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-21 Sep, 2017 | 16:00

Updated At-30 Jul, 2025 | 01:46

D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Known Exploited Vulnerabilities (KEV)

cisa.gov

Vendor:

TRENDnet, Inc.

Product:Multiple Devices

Added At:25 Mar, 2022

Due At:15 Apr, 2022

D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.

Used in Ransomware

Unknown

CWE

CWE-287

Required Action:

The impacted product is end-of-life and should be disconnected if still in use.

Additional Notes:

https://nvd.nist.gov/vuln/detail/CVE-2015-1187

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:21 Sep, 2017 | 16:00

Updated At:30 Jul, 2025 | 01:46

▼CVE Numbering Authority (CNA)

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052	x_refsource_CONFIRM
http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html	x_refsource_MISC
http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html	x_refsource_MISC
https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2	x_refsource_MISC
http://www.securityfocus.com/bid/72848	vdb-entry x_refsource_BID
http://seclists.org/fulldisclosure/2015/Mar/15	mailing-list x_refsource_FULLDISC

Hyperlink: http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052

Resource:

x_refsource_CONFIRM

Hyperlink: http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html

Resource:

x_refsource_MISC

Hyperlink: http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html

Resource:

x_refsource_MISC

Hyperlink: https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2

Resource:

x_refsource_MISC

Hyperlink: http://www.securityfocus.com/bid/72848

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://seclists.org/fulldisclosure/2015/Mar/15

Resource:

mailing-list

x_refsource_FULLDISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052	x_refsource_CONFIRM x_transferred
http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html	x_refsource_MISC x_transferred
http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html	x_refsource_MISC x_transferred
https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2	x_refsource_MISC x_transferred
http://www.securityfocus.com/bid/72848	vdb-entry x_refsource_BID x_transferred
http://seclists.org/fulldisclosure/2015/Mar/15	mailing-list x_refsource_FULLDISC x_transferred

Hyperlink: http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securityfocus.com/bid/72848

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2015/Mar/15

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-287	CWE-287 Improper Authentication

Type: CWE

CWE ID: CWE-287

Description: CWE-287 Improper Authentication

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-25

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1187

Timeline

Event	Date
CVE-2015-1187 added to CISA KEV	2022-03-25 00:00:00

Event: CVE-2015-1187 added to CISA KEV

Date: 2022-03-25 00:00:00

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:21 Sep, 2017 | 16:29

Updated At:20 Apr, 2025 | 01:37

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-03-25	2022-04-15	D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability	The impacted product is end-of-life and should be disconnected if still in use.

Date Added: 2022-03-25

Due Date: 2022-04-15

Vulnerability Name: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

Required Action: The impacted product is end-of-life and should be disconnected if still in use.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

D-Link Corporation

>>dir-626l_firmware>>1.04

cpe:2.3:o:dlink:dir-626l_firmware:1.04:b04:*:*:*:*:*:*

D-Link Corporation

>>dir-626l>>-

cpe:2.3:h:dlink:dir-626l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-636l_firmware>>1.04

cpe:2.3:o:dlink:dir-636l_firmware:1.04:*:*:*:*:*:*:*

D-Link Corporation

>>dir-636l>>-

cpe:2.3:h:dlink:dir-636l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-808l_firmware>>1.03

cpe:2.3:o:dlink:dir-808l_firmware:1.03:b05:*:*:*:*:*:*

D-Link Corporation

>>dir-808l>>-

cpe:2.3:h:dlink:dir-808l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-810l_firmware>>1.01

cpe:2.3:o:dlink:dir-810l_firmware:1.01:b04:*:*:*:*:*:*

D-Link Corporation

>>dir-810l>>-

cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-810l_firmware>>2.02

cpe:2.3:o:dlink:dir-810l_firmware:2.02:b01:*:*:*:*:*:*

D-Link Corporation

>>dir-810l>>-

cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-820l_firmware>>1.02

cpe:2.3:o:dlink:dir-820l_firmware:1.02:b10:*:*:*:*:*:*

D-Link Corporation

>>dir-820l>>-

cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-820l_firmware>>1.05

cpe:2.3:o:dlink:dir-820l_firmware:1.05:b03:*:*:*:*:*:*

D-Link Corporation

>>dir-820l>>-

cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-820l_firmware>>2.01

cpe:2.3:o:dlink:dir-820l_firmware:2.01:b02:*:*:*:*:*:*

D-Link Corporation

>>dir-820l>>-

cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-826l_firmware>>1.00

cpe:2.3:o:dlink:dir-826l_firmware:1.00:b23:*:*:*:*:*:*

D-Link Corporation

>>dir-826l>>-

cpe:2.3:h:dlink:dir-826l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-830l_firmware>>1.00

cpe:2.3:o:dlink:dir-830l_firmware:1.00:b07:*:*:*:*:*:*

D-Link Corporation

>>dir-830l>>-

cpe:2.3:h:dlink:dir-830l:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-836l_firmware>>1.01

cpe:2.3:o:dlink:dir-836l_firmware:1.01:b03:*:*:*:*:*:*

D-Link Corporation

>>dir-836l>>-

cpe:2.3:h:dlink:dir-836l:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-731br_firmware>>2.01

cpe:2.3:o:trendnet:tew-731br_firmware:2.01:b01:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-731br>>-

cpe:2.3:h:trendnet:tew-731br:-:*:*:*:*:*:*:*

D-Link Corporation

>>dir-651_firmware>>1.10na

cpe:2.3:o:dlink:dir-651_firmware:1.10na:b02:*:*:*:*:*:*

D-Link Corporation

>>dir-651>>-

cpe:2.3:h:dlink:dir-651:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-651br_firmware>>-

cpe:2.3:o:trendnet:tew-651br_firmware:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-651br>>-

cpe:2.3:h:trendnet:tew-651br:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-652br_firmware>>-

cpe:2.3:o:trendnet:tew-652br_firmware:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-652br>>-

cpe:2.3:h:trendnet:tew-652br:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-711br_firmware>>1.00

cpe:2.3:o:trendnet:tew-711br_firmware:1.00:b31:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-711br>>-

cpe:2.3:h:trendnet:tew-711br:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-810dr_firmware>>1.00

cpe:2.3:o:trendnet:tew-810dr_firmware:1.00:b19:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-810dr>>-

cpe:2.3:h:trendnet:tew-810dr:-:*:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-813dru_firmware>>1.00

cpe:2.3:o:trendnet:tew-813dru_firmware:1.00:b23:*:*:*:*:*:*

TRENDnet, Inc.

>>tew-813dru>>-

cpe:2.3:h:trendnet:tew-813dru:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov
CWE-287	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-287

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-287

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html	cve@mitre.org	Issue Tracking Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html	cve@mitre.org	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2015/Mar/15	cve@mitre.org	Issue Tracking Mailing List Third Party Advisory
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/72848	cve@mitre.org	Third Party Advisory VDB Entry Broken Link
https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2	cve@mitre.org	Issue Tracking Mitigation Third Party Advisory Broken Link
http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2015/Mar/15	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Mailing List Third Party Advisory
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/72848	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry Broken Link
https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Mitigation Third Party Advisory Broken Link

Hyperlink: http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html

Source: cve@mitre.org

Resource:

Issue Tracking

Third Party Advisory

VDB Entry

Hyperlink: http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html

Source: cve@mitre.org

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://seclists.org/fulldisclosure/2015/Mar/15

Source: cve@mitre.org

Resource:

Issue Tracking

Mailing List

Third Party Advisory

Hyperlink: http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/72848

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Broken Link

Hyperlink: https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2

Source: cve@mitre.org

Resource:

Issue Tracking

Mitigation

Third Party Advisory

Broken Link

Hyperlink: http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html