CVE-2015-2051

CVE-2015-2051 describes a remote command execution in D-Link DIR-645 (Wired/Wireless Router) Rev. Ax with firmware 1.04b12 and earlier via the HNAP GetDeviceSettings action. The flaw allows an unauthenticated attacker to trigger arbitrary commands through the HNAP SOAP interface, leading to full ...

CVE-2013-7471

CVE-2013-7471 affects D-Link DIR-845 (pre-1.02b03), DIR-600 (pre-2.17b01), DIR-645 (pre-1.04b11), DIR-300 rev. B, and DIR-865. Root cause: command injection via shell metacharacters in the SOAP POST request fields NewInternalClient, NewExternalPort, or NewInternalPort of soap.cgi?service=WANIPCon...