Deviceways

Router

D-Link DIR-645

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
A1
Get OpenWrt firmware Release listed · 25.12.6
A1
Open hardware record
Original project github.com

Recorded configuration: 8 MB flash; 64 MB RAM

Limitations
unstable wifi
First installation
GUI OEM; D-Link Recovery GUI; U-Boot TFTP + serial recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

d-link dir-645 a1 — device documentation (github.com)D-Link DIR-645 rev A1 — TechInfoDepot (github.com)D-Link DIR-645 rev A1 — WikiDevi (github.com)Device details — Source documentation (openwrt.org)

Hardware revision
A1

OpenWrt · A1

OpenWrt · A1 — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM, D-Link Recovery GUI, U-Boot TFTP + serial recovery
Recovery routes recorded
D-Link Recovery GUI, U-Boot TFTP + serial recovery
Availability recorded by source
Discontinued 2015

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

Listed in CISA KEV ↗CVSS 8.8 (v3.1)

D-Link DIR-645

The D-Link DIR-645 Wired/Wireless Router Rev

CVE-2015-2051

Affected firmware
Version details in source scope
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources
Public disclosure CVE updated

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

37171 — D-Link DIR-645 (exploit-db.com) ↗
CVE published

CVSS 10.0 (v4.0)

DIR-645

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

CVE-2018-25115

Affected firmware
All versions in the named source scope
Fix
These router models are no longer supported at the time of assignment and affected version ranges may vary.
Read VulnCheck CVE record
Details and sources
Public disclosure CVE updated

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.

Security advisory dlink dir rce service cgi — DIR-645 (vulncheck.com) ↗
CVE published

CVSS 8.7 (v4.0)

DIR-645

D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow

CVE-2026-5815

Affected firmware
1.01 1.02 1.03
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03. Impacted is the function hedwigcgi_main of the file /cgi-bin/hedwig.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-356263 | D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow — DIR-645 (vuldb.com) ↗VDB-356263 | CTI Indicators (IOB, IOC, IOA) — DIR-645 (vuldb.com) ↗Submit #788298 | D-Link DIR-645 1.01–1.03 Stack-based Buffer Overflow — DIR-645 (vuldb.com) ↗
CVE published

CVSS 5.3 (v4.0)

DIR-645

D-Link DIR-645 soap.cgi soapcgi_main command injection

CVE-2025-10689

Affected firmware
105B01
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.cgi. Such manipulation of the argument service leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-324813 | D-Link DIR-645 soap.cgi soapcgi_main command injection — DIR-645 (vuldb.com) ↗VDB-324813 | CTI Indicators (IOB, IOC, TTP, IOA) — DIR-645 (vuldb.com) ↗Submit #653689 | D-Link DIR-645 DIR645A1_FW105B01 Command Injection — DIR-645 (vuldb.com) ↗
CVE published

CVSS 5.3 (v4.0)

DIR-645

D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection

CVE-2025-7192

Affected firmware
1.05B01
Fix
This vulnerability only affects products that are no longer supported by the maintainer.
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgi_main of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

VDB-315131 | D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection — DIR-645 (vuldb.com) ↗VDB-315131 | CTI Indicators (IOB, IOC, TTP, IOA) — DIR-645 (vuldb.com) ↗Submit #607261 | D-Link DIR-645 D-Link DIR‑645 A1 Command Injection — DIR-645 (vuldb.com) ↗
Check more security advisories for this device · CVE.org