Skip to content
OpenAdvisories
Critical · 9.8 Known exploited Scanner template CVE-2023-25280 EUVD-2023-29242GHSA-3pm3-vpvc-2wpp

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with …

Published Mar 16, 2023 · Updated Oct 21, 2025 · Assigned by mitre

Description

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References