Back to Database
Status published
Unknown
CVE-2015-1187
The ping tool in multiple D-Link and TRENDnet devices allow...
Vulnerability Description
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-1187
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052
- http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.html
- http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.html
- https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2
- http://www.securityfocus.com/bid/72848
- http://seclists.org/fulldisclosure/2015/Mar/15
More from dlink
View All →CVE-2022-48108
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...
Unknown
0
CVE-2022-48107
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability...
Unknown
0
CVE-2022-47035
Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows...
Unknown
0
CVE-2022-46642
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...
Unknown
0
CVE-2022-46641
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection...
Unknown
0
Affected Vendor
dlink
View all reports →Affected Software
dir-626l firmware, dir-636l firmware, dir-808l firmware, dir-810l firmware, dir-820l firmware, dir-826l firmware, dir-830l firmware, dir-836l firmware, tew-731br firmware, dir-651 firmware, tew-651br firmware, tew-652br firmware, tew-711br firmware, tew-810dr firmware, tew-813dru firmware
Vulnerable Versions:
1.04, 1.03, 1.01, 2.02, 1.02, 1.05, 2.01, 1.00, 1.10na
Timeline
Official Publish:
September 21st, 2017
Last Modified:
October 21st, 2025
Added to House:
July 19th, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.