This vulnerability affects D-Link DIR-645 routers with firmware versions 1.01 through 1.03. It arises from a stack-based buffer overflow in the hedwigcgi_main function within the /cgi-bin/hedwig.cgi script. An attacker can remotely trigger this overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The affected devices are no longer maintained by D-Link, and no official fixes or patches have been released. Exploit code is publicly available, increasing the threat landscape for these legacy devices.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on affected D-Link DIR-645 devices. Given the stack-based buffer overflow nature, attackers may gain control over the device or disrupt its operation. The high CVSS score reflects the criticality of the vulnerability, especially since it can be exploited remotely without authentication or user interaction. However, the impact is limited to devices running outdated firmware versions that are no longer supported.

No official patch or remediation is available as the affected devices are no longer supported by the vendor. Users should consider discontinuing use of these vulnerable devices or isolating them from untrusted networks to reduce exposure. Network-level protections such as firewall rules blocking access to the /cgi-bin/hedwig.cgi endpoint may help mitigate exploitation risk. Monitoring for unusual activity targeting these devices is advisable. Patch status is not yet confirmed due to lack of vendor support; check vendor communications if any future updates occur.