This vulnerability involves a stack-based buffer overflow in the hedwigcgi_main function of the /cgi-bin/hedwig.cgi CGI script on D-Link DIR-645 routers with firmware versions 1.01 through 1.03. An attacker can remotely trigger this overflow, potentially leading to arbitrary code execution or denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability affects unsupported firmware versions, and no official patch or remediation level has been provided by the vendor.

Successful exploitation may allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. Given the high CVSS score and the remote attack vector without required privileges or user interaction, this poses a significant risk to affected devices. However, the affected products are no longer supported, so no official fixes are available.

No official patch or remediation is available as the affected devices are no longer supported by D-Link. Users should consider discontinuing use of these vulnerable devices or isolating them from untrusted networks to reduce exposure. Monitoring for exploit attempts is advisable given the public availability of exploit code.