D-Link DIR-645 Firmware vulnerabilities

12 CVEs affecting D-Link DIR-645 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10689, published 2025-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2051: D-Link DIR-645 Router Remote Code Execution Vulnerability, published 2015-02-23. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-02-10. EPSS: 97.1% chance of exploitation in the next 30 days. The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
CVE-2013-7389, published 2014-07-07. Medium severity, CVSS 4.3. EPSS: 27.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceid…
CVE-2013-7471, published 2019-06-11. Critical severity, CVSS 9.8. EPSS: 24% chance of exploitation in the next 30 days. An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command…
CVE-2018-25115, published 2025-08-27. Critical severity, CVSS 9.8. EPSS: 10.1% chance of exploitation in the next 30 days. Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows…
CVE-2022-46475, published 2023-01-17. Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days. D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
CVE-2022-32092, published 2022-06-27. Critical severity, CVSS 9.8. EPSS: 5.8% chance of exploitation in the next 30 days. D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.
CVE-2015-2052, published 2015-02-23. High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings…
CVE-2025-10689, published 2025-09-18. Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days. A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The…
CVE-2025-7192, published 2025-07-08. High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days. A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The…
CVE-2021-43722, published 2022-03-31. Critical severity, CVSS 9.8. EPSS: 3.2% chance of exploitation in the next 30 days. D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.

Latest

CVE-2023-36089, published 2023-07-31. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only…
CVE-2020-25786, published 2020-09-19. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by…