CVE-2023-25280 1

Vulnerability (CVE)

CVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 30, 2024

D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Vulnerabilities & Patching