VendorsD-Linkdir-645any version
Vulnerabilities

D-Link DIR-645 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2018-25115
D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
Published 2025-08-27 · Analyzed
10.0EPSS 0.104
CVE-2013-7471
An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.
Published 2019-06-11 · Modified
9.8EPSS 0.240
CVE-2022-32092
D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.
Published 2022-06-27 · Modified
9.8EPSS 0.058
CVE-2025-10689
D-Link DIR-645 soap.cgi soapcgi_main command injection
Published 2025-09-18 · Analyzed
9.8EPSS 0.046
CVE-2023-36089
Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published 2023-07-31 · Modified
9.8EPSS 0.015
CVE-2025-7192
D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection
Published 2025-07-08 · Analyzed
8.8EPSS 0.037