Firetruck

CVE-2023-25280

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
dir820la1_firmwaredlink / dir820la1_firmware105b03affected
n/an/a / n/an/aaffected