Unauthenticated Multiple D-Link Routers RCE

There are chances for the occurrence of remote code execution in D-Link products that includes DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825. This happens when an attacker sends arbitrary data to a “PingTest” device’s common gateway interface, which can result in a common injection. An attacker who executes the command injection could gain complete control of the system.

Mitigation / Precaution

We suggest you to upgrade the D-Link routers in order to fix this vulnerability.

Written by

Jijith Rajan

Cyber Security Engineer

His passion for staying abreast of the latest security threats and trends, coupled with his hands-on experience, allows him to actively contribute to the protection of digital assets. Jijith's dedication and enthusiasm make him a promising talent in the ever-evolving realm of cybersecurity, promising a safer digital future.