ZeroDay Findings
Sign inSign up

Findings

CVE-2015-2051

D-Link DIR-645 Router Remote Code Execution Vulnerability

Published Feb 23, 2015 · updated Jun 16, 2026 · dlink dir-645 firmware

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 23, 2015 · Catalog

    Detected

    The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

  2. Feb 10, 2022 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Aug 10, 2022 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Aug 10, 2022

Affected

  • cpe dlink/dir-645 firmwareversion unspecified
  • vendor D-Link DIR-645 Routerversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2015-2051

    D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2015-2051

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2015-2051

    30-day exploitation probability 97.1%

    first.org
  • Exploit DatabasePublic exploit reference37171

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit ModulesPublic exploit moduleexploit_linux/http/dlink_hnap_header_exec_noauth

    Public module reference (normal). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDVulnerability recordCVE-2015-2051

    The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

    nvd.nist.gov

References

CVE-2015-2051 · ZeroDay Findings