← Database

CVE-2023-25280

CRITICAL CVSS: 9.8 Published: 2023-03-16 Modified: 2026-06-17

Description

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Affected Platforms

Dlink Dir-820L FirmwareDlink Dir-820L

Weakness Type

CWE-78, CWE-78

References