DF
Product
Dir-645 Firmware
On CISA KEVExploited in the wild
12
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 2Medium 1Low 0
Watch
Add Dir-645 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-10689 | 9.8 | Sep 18 | D-Link DIR-645 soap.cgi soapcgi_main command injection Affected: 1.05b01 |
| CVE-2018-25115 | 9.8 | Aug 27 | D-Link DIR-110/412/600/615/645/815 RCE via service.cgi Affected: All versions, or not specified |
| CVE-2023-36089 | 9.8 | Jul 31 | Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin Affected: 1.03 |
| CVE-2022-46475 | 9.8 | Jan 17 | D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function Affected: 1.06b01_beta01 |
| CVE-2022-32092 | 9.8 | Jun 27 | D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi Affected: through 1.03 |
| CVE-2021-43722 | 9.8 | Mar 31 | D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow Affected: 1.03 |
| CVE-2013-7471 | 9.8 | Jun 11 | An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev Affected: before 1.04b11 |
Showing 7