CVE-2023-25280

Timeline

Detection, updates, and resolution for this record.

1. Mar 15, 2023 · Catalog

   Detected

   D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

2. Sep 30, 2024 · CISA KEV

   Known exploited

   The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

3. Oct 21, 2024 · CISA KEV

   Remediation due

   The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

4. Jun 16, 2026 · Catalog

   Updated

   D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Affected

• cpe dlink/dir-820l firmware1.05b03
• vendor D-Link DIR-820 Routerversion unspecified

Sources

• CISA KEVCVE-2023-25280

  D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

  cisa.gov
• CVE.orgCVE-2023-25280

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2023-25280

  30-day exploitation probability 97.9%

  first.org
• NIST NVDCVE-2023-25280

  OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

  nvd.nist.gov

References

• Exploit · github.com
• CISA note · nvd.nist.gov
• CISA note · supportannouncement.us.dlink.com
• US Government Resource · cisa.gov
• Not Applicable · dlink.com