CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 82.9% chance of exploitation in the next 30 days.

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Affected products

• D-Link Dir-626l Firmware: version 1.04 only
• D-Link Dir-636l Firmware: version 1.04 only
• D-Link Dir-651 Firmware: version 1.10na only
• D-Link Dir-808l Firmware: version 1.03 only
• D-Link Dir-810l Firmware: version 1.01 only; version 2.02 only
• D-Link DIR-820L Firmware: version 1.02 only; version 1.05 only; version 2.01 only
• D-Link Dir-826l Firmware: version 1.00 only
• D-Link Dir-830l Firmware: version 1.00 only
• D-Link Dir-836l Firmware: version 1.01 only
• TRENDnet Tew-651br Firmware: affected versions not specified
• TRENDnet Tew-652br Firmware: affected versions not specified
• TRENDnet Tew-711br Firmware: version 1.00 only
• TRENDnet Tew-731br Firmware: version 2.01 only
• TRENDnet Tew-810dr Firmware: version 1.00 only
• TRENDnet Tew-813dru Firmware: version 1.00 only

Published 2017-09-21. Last modified 2026-06-17.