GCVE - cpe:2.3:h:dlink:dir-645:a1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-645:a1:*:*:*:*:*:*:*

part: h version: a1 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 645 (`4021e1a0-edd1-5fa2-8c73-489f0541ab2f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-46475`	not_vulnerable	2026-06-08 05:50:38.936852	Details available D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function. Published: 2023-01-17T00:00:00.000Z Updated: 2025-04-03T19:05:03.456Z Open on db.gcve.eu Reference links https://github.com/Insight8991/iot/blob/main/DIR-645%20genacgi%20Stack%20overflow.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43722`	not_vulnerable	2026-06-08 05:36:43.898048	Details available D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size. Published: 2022-03-31T20:28:00.000Z Updated: 2024-08-04T04:03:08.651Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/luqiut/iot/blob/main/DIR-645%20Stack%20overflow.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25786`	not_vulnerable	2026-06-08 05:23:49.431631	Details available webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header Published: 2020-09-19T19:24:09.000Z Updated: 2024-08-04T15:40:36.997Z Open on db.gcve.eu Reference links https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10190 https://github.com/sek1th/iot/blob/master/DIR-816L_XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2052`	not_vulnerable	2026-06-08 05:06:27.368479	Details available Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface. Published: 2015-02-23T17:00:00.000Z Updated: 2024-08-06T05:02:43.341Z Open on db.gcve.eu Reference links http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 http://www.securityfocus.com/bid/72623	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2051`	not_vulnerable	2026-06-08 05:06:27.367956	Details available The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface. Published: 2015-02-23T17:00:00.000Z Updated: 2025-10-22T00:05:33.088Z Open on db.gcve.eu Reference links http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 https://www.exploit-db.com/exploits/37171/ http://www.securityfocus.com/bid/72623 http://www.securityfocus.com/bid/74870 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10282	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7389`	vulnerable	2026-06-08 05:05:10.219890	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.