D-Link Dir-826l Firmware vulnerabilities

2 CVEs affecting D-Link Dir-826l Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-45382, published 2022-02-17.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-45382: D-Link Multiple Routers Remote Code Execution Vulnerability, published 2022-02-17. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-04-04. EPSS: 97.8% chance of exploitation in the next 30 days. A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file.…
• CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability, published 2017-09-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 82.9% chance of exploitation in the next 30 days. The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.