Read the docs
TI-2015-01070 Aliases CVE-2015-1187GHSA-2cvq-m957-r86c

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute…

Priority CRITICAL 100Exploited in the wildCWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-287.

Summary

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Why it matters now

Exploitation Active In CISA KEV since 2022-03-25CISA due date 2022-04-15
EPSS 0.82685 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:o:dlink:dir-626l_firmware:1.04:b04:*:*:*:*:*:*1.04 b04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-626l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-636l_firmware:1.04:*:*:*:*:*:*:*1.04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-636l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-808l_firmware:1.03:b05:*:*:*:*:*:*1.03 b05VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-808l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-810l_firmware:1.01:b04:*:*:*:*:*:*1.01 b04VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-810l_firmware:2.02:b01:*:*:*:*:*:*2.02 b01VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-820l_firmware:1.02:b10:*:*:*:*:*:*1.02 b10VulnerableD-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-626l_firmware:1.04:b04:*:*:*:*:*:* Versions 1.04 b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-626l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-636l_firmware:1.04:*:*:*:*:*:*:* Versions 1.04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-636l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-808l_firmware:1.03:b05:*:*:*:*:*:* Versions 1.03 b05 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-808l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-810l_firmware:1.01:b04:*:*:*:*:*:* Versions 1.01 b04 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-810l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-810l_firmware:2.02:b01:*:*:*:*:*:* Versions 2.02 b01 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-820l_firmware:1.02:b10:*:*:*:*:*:* Versions 1.02 b10 Vulnerable ·D-Link Japan K.K.
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-820l_firmware:1.05:b03:*:*:*:*:*:*1.05 b03VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-820l_firmware:2.01:b02:*:*:*:*:*:*2.01 b02VulnerableD-Link Japan K.K.
cpe:2.3:o:dlink:dir-826l_firmware:1.00:b23:*:*:*:*:*:*1.00 b23VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-826l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-830l_firmware:1.00:b07:*:*:*:*:*:*1.00 b07VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-830l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:dlink:dir-836l_firmware:1.01:b03:*:*:*:*:*:*1.01 b03VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-836l:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:trendnet:tew-731br_firmware:2.01:b01:*:*:*:*:*:*2.01 b01VulnerableTRENDnet
cpe:2.3:h:trendnet:tew-731br:-:*:*:*:*:*:*:*not specified by NVDRunning onTRENDnet
cpe:2.3:o:dlink:dir-651_firmware:1.10na:b02:*:*:*:*:*:*1.10na b02VulnerableD-Link Japan K.K.
cpe:2.3:h:dlink:dir-651:-:*:*:*:*:*:*:*not specified by NVDRunning onD-Link Japan K.K.
cpe:2.3:o:trendnet:tew-651br_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTRENDnet
cpe:2.3:h:trendnet:tew-651br:-:*:*:*:*:*:*:*not specified by NVDRunning onTRENDnet
cpe:2.3:o:trendnet:tew-652br_firmware:-:*:*:*:*:*:*:*not specified by NVDVulnerableTRENDnet
cpe:2.3:h:trendnet:tew-652br:-:*:*:*:*:*:*:*not specified by NVDRunning onTRENDnet
cpe:2.3:o:trendnet:tew-711br_firmware:1.00:b31:*:*:*:*:*:*1.00 b31VulnerableTRENDnet
cpe:2.3:h:trendnet:tew-711br:-:*:*:*:*:*:*:*not specified by NVDRunning onTRENDnet
cpe:2.3:o:trendnet:tew-810dr_firmware:1.00:b19:*:*:*:*:*:*1.00 b19VulnerableTRENDnet
cpe:2.3:h:trendnet:tew-810dr:-:*:*:*:*:*:*:*not specified by NVDRunning onTRENDnet
cpe:2.3:o:trendnet:tew-813dru_firmware:1.00:b23:*:*:*:*:*:*1.00 b23VulnerableTRENDnet
cpe:2.3:h:trendnet:tew-813dru:-:*:*:*:*:*:*:*not specified by NVDRunning onTRENDnet
  • cpe:2.3:h:dlink:dir-820l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-820l_firmware:1.05:b03:*:*:*:*:*:* Versions 1.05 b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-820l_firmware:2.01:b02:*:*:*:*:*:* Versions 2.01 b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-826l_firmware:1.00:b23:*:*:*:*:*:* Versions 1.00 b23 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-826l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-830l_firmware:1.00:b07:*:*:*:*:*:* Versions 1.00 b07 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-830l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:dlink:dir-836l_firmware:1.01:b03:*:*:*:*:*:* Versions 1.01 b03 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-836l:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:trendnet:tew-731br_firmware:2.01:b01:*:*:*:*:*:* Versions 2.01 b01 Vulnerable ·TRENDnet
  • cpe:2.3:h:trendnet:tew-731br:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet
  • cpe:2.3:o:dlink:dir-651_firmware:1.10na:b02:*:*:*:*:*:* Versions 1.10na b02 Vulnerable ·D-Link Japan K.K.
  • cpe:2.3:h:dlink:dir-651:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·D-Link Japan K.K.
  • cpe:2.3:o:trendnet:tew-651br_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TRENDnet
  • cpe:2.3:h:trendnet:tew-651br:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet
  • cpe:2.3:o:trendnet:tew-652br_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·TRENDnet
  • cpe:2.3:h:trendnet:tew-652br:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet
  • cpe:2.3:o:trendnet:tew-711br_firmware:1.00:b31:*:*:*:*:*:* Versions 1.00 b31 Vulnerable ·TRENDnet
  • cpe:2.3:h:trendnet:tew-711br:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet
  • cpe:2.3:o:trendnet:tew-810dr_firmware:1.00:b19:*:*:*:*:*:* Versions 1.00 b19 Vulnerable ·TRENDnet
  • cpe:2.3:h:trendnet:tew-810dr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet
  • cpe:2.3:o:trendnet:tew-813dru_firmware:1.00:b23:*:*:*:*:*:* Versions 1.00 b23 Vulnerable ·TRENDnet
  • cpe:2.3:h:trendnet:tew-813dru:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TRENDnet

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2022-03-25 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2015-1187
  3. 2026-10-03 Alias added: GHSA-2cvq-m957-r86c

References

Exploit 1

Advisory 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences