Known Exploited Vulnerabilities September 30, 2024 · CISA KEV Catalog

CVE-2023-25280: D-Link DIR-820 Router OS Command Injection Vulnerability

D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-25280 D-Link
Related: CVE-2025-29635: D-Link DIR-823X Command Injection Vulnerability Known Exploited Vulnerabilities · Apr 24, 2026
CVE-2022-37055: D-Link Routers Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Dec 08, 2025
CVE-2022-40799: D-Link DNR-322L Download of Code Without Integrity Check Vulnerability Known Exploited Vulnerabilities · Aug 05, 2025