CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Authentication flaw

UNSUPPORTED WHEN ASSIGNED Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

D-Link DIR-645 security vulnerabilities

The D-Link DIR-645 is a wireless router from the Chinese company D-Link. A security vulnerability exists in the D-Link DIR-645 that originates from an authentication bypass via the phpcgimain function in cgibin...

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36089: Incorrect Authorization

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36089

CVE-2023-36089 concerns a remote authentication bypass in D-Link DIR-645, firmware 1.03, via the phpcgi_main function in cgibin. The Red Hat/NVD entries describe an attacker gaining escalated privileges without user interaction. The issue is tied to products that are no longer supported, and no o...

PT-2023-5278 · D Link · D-Link Dir-645

Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 version 1.03 Description: The issue is related to an Authentication Bypass vulnerability that allows remote attackers to gain escalated privileges. This is due to insufficient access control in the phpcgi main function in cgibi...

D-Link DIR-645 Rev. A Devices Multiple Vulnerabilities (2021 - 2025)

D-Link DIR-645 Rev. A devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-645 Rev. A Devices Multiple Vulnerabilities (Feb 2015)

D-Link DIR-645 Rev. A devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

Command injection

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

EUVD-2022-53360

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2022-32092

CVE-2022-32092 affects the D-Link DIR-645 router (v1.03) with a command injection vulnerability exposed through the QUERY_STRING parameter in the __ajax_explorer.sgi endpoint. Red Hat/OpenVAS/CVE aggregations and the NVD entry all describe this as a remote, unauthenticated, network-executable iss...

D-Link DIR-645: Operating System Command Injection Vulnerability

The D-Link DIR-645 is a wireless router from China-based D-Link. An operating system command injection vulnerability exists in the D-Link DIR-645 v1.03, which originates from a command injection vulnerability in the QUERYSTRING parameter in the ajaxexplorer.sgi page...

CVE-2022-32092: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...