Live › vulnerability › CVE-2015-2051
Go to dashboardThe D-Link DIR-645 wired/wireless router accepts a crafted GetDeviceSettings request on its HNAP interface that makes it run attacker-supplied commands. An attacker who can reach the router gets command execution on the device, with no login needed according to the description.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| D-Link DIR-645 Router | vendor | – | – |
Check whether any DIR-645 router is in use and whether its HNAP web interface (port 80) is reachable from the internet or untrusted networks.
Disconnect the DIR-645 from the network; CISA states the product is end-of-life, so no vendor patch is assumed and replacement is the path.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
CISA required action: The impacted product is end-of-life and should be disconnected if still in use.
This page as .md · .json · in your agent: get_signal("CVE-2015-2051")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.