CVE-2015-1187

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.htmlIssue Tracking, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Mar/15Issue Tracking, Mailing List, Third Party Advisory
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052Vendor Advisory
http://www.securityfocus.com/bid/72848Broken Link, Third Party Advisory, VDB Entry
https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2Broken Link, Issue Tracking, Mitigation, Third Party Advisory
http://packetstormsecurity.com/files/130607/D-Link-DIR636L-Remote-Command-Injection.htmlIssue Tracking, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/131465/D-Link-TRENDnet-NCC-Service-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2015/Mar/15Issue Tracking, Mailing List, Third Party Advisory
http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10052Vendor Advisory
http://www.securityfocus.com/bid/72848Broken Link, Third Party Advisory, VDB Entry
https://github.com/darkarnium/secpub/tree/master/Multivendor/ncc2Broken Link, Issue Tracking, Mitigation, Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1187US Government Resource

Timeline

Published: Sep 21, 2017
Last modified: Jun 17, 2026
Added to CISA KEV: Mar 25, 2022
NVD status: Analyzed

Related CVEs from 2015

CVE-2015-11887.5The certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL routers with firmware before 6.14.00 allows r CVE-2015-11915.0Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2)CVE-2015-11925.0Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted arch CVE-2015-11935.0Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or CVE-2015-11944.3pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.CVE-2015-11956.5The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticate CVE-2015-11964.3GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.CVE-2015-11971.9cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in a CVE-2015-11987.5Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.CVE-2015-11997.5Directory traversal vulnerability in ppmd 10.1-5.CVE-2015-12002.1Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission CVE-2015-12015.0Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the