CVE-2015-2051

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

Affected products

D-Link Dir-645

Dlink dir-645 Firmware

< 1.05b01

Fix

Available

CVSS 2.0

10.0 HIGH

CVSS 3.1

8.8 HIGH

EPSS

96.9% (100th percentile)

Weakness

CWE-77

NVD status

Analyzed

Published

2015-02-23