[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBZgI64OY129xJVVRkvYEd0Fy8EQ_TWzzdzgeVQZDW70":3,"g5a-family:dlink\u002Fdir-645_firmware":125,"g5a-ex:dlink\u002Fdir-645_firmware@*":126},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":97,"seoMetadata":103,"meta":122},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"dlink","dir-645_firmware",7,11,1,"2025-09-18",[14,19,21,23,25,27,29],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.03",2,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"1.04",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"1.04b11",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"1.04b12",{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},"1.05b01",{"version":28,"cve_count":11,"kev_count":17,"has_kev":18},"1.06b01",{"version":30,"cve_count":11,"kev_count":17,"has_kev":18},"1.06b01_beta01","Dir-645 Firmware by Dlink is a technology product with 7 tracked versions and 11 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},{"version":28,"cve_count":11,"kev_count":17,"has_kev":18},{"version":30,"cve_count":11,"kev_count":17,"has_kev":18},[41,49,57,62,67,72,77,82,87,92],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":4,"epssScore":48},"CVE-2015-2051","The D-Link DIR-645 Wired\u002FWireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.","2015-02-23",9.8,"v3.1","Critical",0.97101,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":18,"epssScore":56},"CVE-2013-7389","Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceid parameter to parentalcontrols\u002Fbind.php, (2) RESULT parameter to info.php, or (3) receiver parameter to bsc_sms_send.php.","2014-07-07",4.3,"v2","Medium",0.27753,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":18,"epssScore":61},"CVE-2013-7471","An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.","2019-06-11",0.23983,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":18,"epssScore":66},"CVE-2018-25115","Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.","2025-08-27",0.10133,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":18,"epssScore":71},"CVE-2022-46475","D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.","2023-01-17",0.09529,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":18,"epssScore":76},"CVE-2022-32092","D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.","2022-06-27",0.05799,{"cveId":78,"description":79,"publishedDate":44,"cvssScore":80,"cvssVersion":54,"severity":47,"isKev":18,"epssScore":81},"CVE-2015-2052","Stack-based buffer overflow in the DIR-645 Wired\u002FWireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface.",10,0.05205,{"cveId":83,"description":84,"publishedDate":12,"cvssScore":85,"cvssVersion":46,"severity":55,"isKev":18,"epssScore":86},"CVE-2025-10689","A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file \u002Fsoap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.",6.3,0.04558,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":18,"epssScore":91},"CVE-2021-43722","D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.","2022-03-31",0.03162,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":18,"epssScore":96},"CVE-2023-36089","Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.","2023-07-31",0.01464,[98],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":101,"cisaRequiredAction":102},"D-Link DIR-645 Router Remote Code Execution Vulnerability","2022-02-10","D-Link DIR-645 Wired\u002FWireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.","The impacted product is end-of-life and should be disconnected if still in use.",{"title":104,"metaDescription":105,"keywords":106,"structuredData":107},"Dir-645 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-645 Firmware by Dlink covering 7 versions with 11 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-645 Firmware vulnerabilities, Dir-645 Firmware security, Dir-645 Firmware CVE, Dlink Dir-645 Firmware, Dir-645 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-645 Firmware KEV, Dir-645 Firmware exploited vulnerabilities",{"@context":108,"@type":109,"name":110,"description":105,"url":111,"manufacturer":112,"applicationCategory":116,"softwareVersion":117,"mainEntity":118},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-645 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-645_firmware",{"@type":113,"name":114,"url":115},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","7 versions tracked",{"@type":119,"name":120,"description":121,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-645 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-645 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":123,"apiVersion":124},"2026-10-17T20:37:31.843Z","3.0",[],{"rows":127,"total":11,"capped":18,"failed":17},[128],{"cveId":42,"name":99,"severity":47,"cvss":45,"added":100,"epss":48,"published":129,"ranges":130,"checked":4,"hits":132,"covers":18},"2015-02-23T17:59:08.32",[131],"before 1.05b01",[]]