CVE-2015-2051VulnerabilityPublished 02/10/2022Updated 10/24/2026

CVE-2015-2051: D-Link DIR-645 Router Remote Code Execution Vulnerability

Affects D-Link DIR-645 RouterSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 02/10/2022
KEV deadline: 08/10/2022
EPSS: 97.1% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

The impacted product is end-of-life and should be disconnected if still in use.

nvd.nist.gov/vuln/detail/CVE-2015-2051 (opens in a new tab)

Description

The D-Link DIR-645 Wired/Wireless Router contains a remote code execution vulnerability via the HNAP interface's GetDeviceSettings action. This flaw allows remote attackers to execute arbitrary commands on the affected device. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.

Summary

CVE-2015-2051 describes a remote code execution vulnerability in the D-Link DIR-645 router. Attackers can exploit the GetDeviceSettings action of the HNAP interface to execute arbitrary commands remotely. This vulnerability has been observed in active exploitation campaigns. No vendor patch or remediation details are provided in the available data.

Impact

Successful exploitation allows remote attackers to execute arbitrary commands on the router, potentially leading to full compromise of the device. This can affect network integrity and confidentiality for users of the vulnerable router model. The vulnerability is confirmed to be exploited in the wild, indicating active threat to affected users.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider disabling the HNAP interface if possible or isolating the device from untrusted networks to reduce exposure.

Weaknesses

CWE-77Command Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:11:01 UTC

Weaknesses

References

Related threats