Live › vulnerability › CVE-2023-25280
Go to dashboardD-Link DIR-820 routers have an OS command injection flaw in the ping_addr parameter of ping.ccp. A remote attacker without credentials can inject commands and escalate to root on the router.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link DIR-820 Router | vendor | – | – |
| dlink dir-820l firmware | vendor | = 1.05b03 | – |
Identify any D-Link DIR-820 router on the network (model label or admin page); unknown whether a firmware check command exists.
Discontinue use of the DIR-820, since CISA says the product is end-of-life and end-of-service; no patched firmware is stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
CISA required action: The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
This page as .md · .json · in your agent: get_signal("CVE-2023-25280")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.