Actively exploited · Published Mar 16, 2023 · Assigned by mitre
CVE-2023-25280
Critical 9.8 Exploited
In plain English
A critical-severity OS command injection in DIR-820 Router from D-Link. Attackers are actively exploiting it in the wild (listed by CISA on September 30, 2024). The chance it is exploited in the next 30 days is estimated at 97.9% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
CISA guidance
The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.
Federal agencies must remediate by Oct 21, 2024.
Official description
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
Affected products (as reported)
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H