CVE-2015-1187

This Metasploit module exploits a command injection vulnerability in the ncc service of several D-Link and TRENDnet routers. It leverages the ping command functionality to execute arbitrary commands, download a payload, and achieve remote code execution.

This Metasploit module exploits a command injection vulnerability in the ncc service of several D-Link and TRENDnet routers by sending a crafted POST request to the ping.ccp endpoint. It achieves remote code execution by injecting commands into the ping_addr parameter and leveraging wget to download and execute a payload.