CVE-2021-43722: D-Link DIR-645 Firmware

Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days.

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.

Affected products

• D-Link DIR-645 Firmware: version 1.03 only

Published 2022-03-31. Last modified 2026-06-17.