https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280 D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. Added to the CISA KEV catalog on 2024-09-30. CVE-2023-25280 was assigned before 2024; the KEV listing came in 2024. en Mon, 30 Sep 2024 00:00:00 GMT https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280 https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280#2024-09-30-b026f42e Mon, 30 Sep 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>