Back to KEVs

CVE-2015-2051

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a...

Basic Information

CVE State
PUBLISHED
Reserved Date
February 23, 2015
Published Date
February 23, 2015
Last Updated
January 06, 2025
Vendor
D-Link
Product
DIR-645 Wired/Wireless Router
Description
The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
Tags
cisa edge

CVSS Scores

CVSS v3.1

9.8 - CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

SSVC Information

Exploitation
active
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (2025-05-05 00:00:00 UTC) Source

References

http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10051 https://www.exploit-db.com/exploits/37171/ http://www.securityfocus.com/bid/72623 http://www.securityfocus.com/bid/74870 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10282

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-02-10 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel