Dir-645 Firmware Security Vulnerabilities and Issues — Dir-645 Firmware CVE List

Lucene search

DlinkDir-645 Firmware

5 matches found

CVE•added 2019/06/11 9:29 p.m.•111 views

CVE-2013-7471

An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element ...

9.8CVSS9.6AI score0.26614EPSS

CVE•added 2022/03/31 9:15 p.m.•71 views

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.

9.8CVSS9.4AI score0.01359EPSS

CVE•added 2022/06/27 10:15 p.m.•59 views

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.

9.8CVSS9.8AI score0.2247EPSS

CVE•added 2023/07/31 2:15 p.m.•50 views

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

9.8CVSS9.5AI score0.00377EPSS

CVE•added 2023/01/17 9:15 p.m.•43 views

CVE-2022-46475

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.

9.8CVSS9.6AI score0.282EPSS