Dir-645

This hub aggregates every CVE we track for Dir-645, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Dir-645.

• CVE-2026-5815D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow8.8Apr 8, 2026
• CVE-2025-10689D-Link DIR-645 soap.cgi soapcgi_main command injection6.3Sep 18, 2025
• CVE-2018-25115D-Link DIR-110/412/600/615/645/815 RCE via service.cgi9.8Aug 27, 2025
• CVE-2025-7192D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection6.3Jul 8, 2025
• CVE-2023-36089Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only af...9.8Jul 31, 2023
• CVE-2022-32092D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.9.8Jun 27, 2022
• CVE-2013-7389Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) devicei...4.3Jul 7, 2014