← Back to browse · API

CVE-2023-25280

Severity
CRITICAL
CVSS
9.8
EPSS
0.97864
Risk score
59.25
CISA KEV
Yes
PoC
No
Published
2023-03-16
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2023-29242, GHSA-3PM3-VPVC-2WPP
Products
D-Link:DIR-820 Router, n/a:n/a n/a
Sources
cisa.gov CVE-2023-25280
euvd EUVD-2023-29242

Description

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

References