Unauthenticated Multiple D-Link Routers RCE

There are chances for the occurrence of remote code execution in D-Link products that includes DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825. This happens when an attacker sends arbitrary data to a “PingTest” device’s common gateway interface, which can result in a common injection. An attacker who executes the command injection could gain complete control of the system.

Mitigation / Precaution

We suggest you to upgrade the D-Link routers in order to fix this vulnerability.

Written by

Jijith Rajan

Cyber Security Engineer