GCVE - cpe:2.3:o:dlink:dir-645_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-645_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 645 Firmware (`2de2f88c-0da0-56e5-8295-d2b4edfa1dc3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-7192`	vulnerable	2026-06-08 07:43:18.114614	D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection MEDIUM (6.3) A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-07-08T19:32:06.193Z Updated: 2025-07-09T13:32:20.976Z Open on db.gcve.eu Reference links https://vuldb.com/?id.315131 https://vuldb.com/?ctiid.315131 https://vuldb.com/?submit.607261 https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR%E2%80%91645%20A1%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi.md https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-32092`	vulnerable	2026-06-08 05:44:42.561547	Details available D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi. Published: 2022-06-27T21:37:27.000Z Updated: 2024-08-03T07:32:56.000Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/fxc233/iot-vul/tree/main/D-Link/DIR-645	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2052`	vulnerable	2026-06-08 05:06:27.368455	Details available Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface. Published: 2015-02-23T17:00:00.000Z Updated: 2024-08-06T05:02:43.341Z Open on db.gcve.eu Reference links http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 http://www.securityfocus.com/bid/72623	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2051`	vulnerable	2026-06-08 05:06:27.367220	Details available The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface. Published: 2015-02-23T17:00:00.000Z Updated: 2025-10-22T00:05:33.088Z Open on db.gcve.eu Reference links http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 https://www.exploit-db.com/exploits/37171/ http://www.securityfocus.com/bid/72623 http://www.securityfocus.com/bid/74870 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10282	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7471`	vulnerable	2026-06-08 05:05:10.426381	Details available An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request. Published: 2019-06-11T20:46:45.000Z Updated: 2024-08-06T18:09:16.715Z Open on db.gcve.eu Reference links http://www.s3cur1ty.de/m1adv2013-020 https://www.exploit-db.com/exploits/27044	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.