FlagThis
← Back to CVE List
Vulnerability Intelligence Report
D-Link DIR-820 Router OS Command Injection Vulnerability

CVE-2023-25280

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

CISA KEV Nuclei Template SSVC: Active Exploitation Automatable
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:98.05%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-78 ↗CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products & Versions

Vendor Product Affected Versions
dlink dir-820l_firmware 1.05b03
dlink dir-820l all

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
Nuclei Template
SCANNER AVAILABLE
EPSS Score
98.053%
GitHub Advisory
GHSA-3pm3-vpvc-2wpp ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2023-02-06T00:00:00
Published2023-03-16T00:00:00
Last Updated2025-10-21T23:15:22

Related Intelligence

Related CVEs
CVE-2024-48150 CVSS 9.8 — D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_…
CVE-2023-44809 CVSS 9.8 — D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.
CVE-2023-44808 CVSS 9.8 — D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_…
CVE-2023-44807 CVSS 9.8 — D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the canc…
CVE-2023-25279 CVSS 9.8 — OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows…
LINK COPIED TO CLIPBOARD