GCVE - cpe:2.3:h:dlink:dir-645:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-645:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 645 (`4021e1a0-edd1-5fa2-8c73-489f0541ab2f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-25115`	vulnerable	2026-06-08 05:11:29.403341	D-Link DIR-110/412/600/615/645/815 RCE via service.cgi Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC. Published: 2025-08-27T21:24:23.427Z Updated: 2026-05-25T23:40:59.072Z Open on db.gcve.eu Reference links https://github.com/Cr0n1c/dlink_shell_poc/blob/master/dlink_auth_rce https://www.exploit-db.com/exploits/43496 https://legacy.us.dlink.com/ https://support.dlink.com/EndOfLifePolicy.aspx https://www.vulncheck.com/advisories/dlink-dir-rce-service-cgi	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2051`	vulnerable	2026-06-08 05:06:27.365456	Details available The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface. Published: 2015-02-23T17:00:00.000Z Updated: 2025-10-22T00:05:33.088Z Open on db.gcve.eu Reference links http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 https://www.exploit-db.com/exploits/37171/ http://www.securityfocus.com/bid/72623 http://www.securityfocus.com/bid/74870 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10282	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.