CVE-2023-25280 D-Link DIR-820 Router
D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
- CVSS
- not scored
On CISA’s exploited list
D-Link DIR-820 Router OS Command Injection Vulnerability
- Added
- 2024-09-30
- Federal patch deadline
- 2024-10-21
- Ransomware use
- not known