D-Link DIR-645
Approved changes feed: RSS · Atom
cpe:2.3:h:dlink:dir-645:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dir 645 (4021e1a0-edd1-5fa2-8c73-489f0541ab2f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7192 |
not_vulnerable | 2026-06-08 07:43:18.115523 |
D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection
MEDIUM (6.3)
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-07-08T19:32:06.193Z
Updated: 2025-07-09T13:32:20.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10689 |
not_vulnerable | 2026-06-08 07:02:27.323251 |
D-Link DIR-645 soap.cgi soapcgi_main command injection
MEDIUM (6.3)
A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-09-18T20:32:06.032Z
Updated: 2025-09-19T13:07:05.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36089 |
not_vulnerable | 2026-06-08 06:06:28.545946 |
Details available
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-07-31T00:00:00.000Z
Updated: 2024-10-22T18:06:25.454Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32092 |
not_vulnerable | 2026-06-08 05:44:42.562523 |
Details available
D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.
Published: 2022-06-27T21:37:27.000Z
Updated: 2024-08-03T07:32:56.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25115 |
not_vulnerable | 2026-06-08 05:11:29.412338 |
D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.
Published: 2025-08-27T21:24:23.427Z
Updated: 2026-05-25T23:40:59.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7471 |
not_vulnerable | 2026-06-08 05:05:10.426859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.