D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow
अनुवाद हो रहा है…प्लेटफ़ॉर्म
dlink
घटक
dlink
CVE-2026-5815 describes a stack-based buffer overflow vulnerability found in the D-Link DIR-645 router. This flaw resides within the hedwigcgi_main function of the /cgi-bin/hedwig.cgi file, allowing a remote attacker to potentially trigger a crash or execute arbitrary code. The vulnerability impacts D-Link DIR-645 routers running versions 1.01 through 1.03, and it’s important to note that these products are no longer supported by the vendor.
प्रभाव और हमले की स्थितियाँअनुवाद हो रहा है…
A critical vulnerability has been detected in the D-Link DIR-645 router (firmware versions 1.01, 1.02, and 1.03), identified as CVE-2026-5815. This vulnerability resides within the 'hedwigcgi_main' function of the '/cgi-bin/hedwig.cgi' file and allows for a stack-based buffer overflow. This means a remote attacker could potentially execute malicious code on the device, compromising network security. The vulnerability is rated with a CVSS score of 8.8, indicating a high risk. Importantly, D-Link no longer provides support for this router model, meaning no security updates will be released to mitigate this vulnerability. The public availability of the exploit makes exploitation more accessible to attackers.
शोषण संदर्भअनुवाद हो रहा है…
The exploit for CVE-2026-5815 is publicly available, making it easier for attackers with technical skills to utilize it. The vulnerability is exploited through manipulation of the 'hedwigcgi_main' function, leading to a stack-based buffer overflow. A remote attacker can send specially crafted requests to the router to trigger this overflow and potentially gain control of the device. The lack of vendor support increases the risk, as no security patches are available to fix the vulnerability. The remote nature of the exploitation means the attack can originate from anywhere on the internet.
खतरा खुफिया
एक्सप्लॉइट स्थिति
EPSS
0.09% (26% शतमक)
CISA SSVC
CVSS वेक्टर
इन मेट्रिक्स का क्या मतलब है?
- Attack Vector
- नेटवर्क — इंटरनेट के माध्यम से दूरस्थ रूप से शोषण योग्य। कोई भौतिक या स्थानीय पहुंच आवश्यक नहीं।
- Attack Complexity
- निम्न — कोई विशेष शर्त नहीं। विश्वसनीय रूप से शोषण योग्य।
- Privileges Required
- निम्न — कोई भी वैध उपयोगकर्ता खाता पर्याप्त है।
- User Interaction
- कोई नहीं — स्वचालित और मूक हमला। पीड़ित कुछ नहीं करता।
- Scope
- अपरिवर्तित — प्रभाव केवल कमज़ोर घटक तक सीमित।
- Confidentiality
- उच्च — पूर्ण गोपनीयता हानि। हमलावर सभी डेटा पढ़ सकता है।
- Integrity
- उच्च — हमलावर कोई भी डेटा लिख, बदल या हटा सकता है।
- Availability
- उच्च — पूर्ण क्रैश या संसाधन समाप्ति। पूर्ण सेवा से इनकार।
प्रभावित सॉफ्टवेयर
कमजोरी वर्गीकरण (CWE)
समयरेखा
- आरक्षित
- प्रकाशित
- संशोधित
- EPSS अद्यतन
शमन और वर्कअराउंडअनुवाद हो रहा है…
Given that D-Link no longer supports the DIR-645, the primary mitigation is to replace the device with a more modern, actively supported router. If immediate replacement isn't possible, isolate the DIR-645 from the main network, using it only for non-critical devices without internet access. Monitoring the network for suspicious activity can also help detect potential attacks. It's crucial to understand that these measures are palliative and do not eliminate the underlying vulnerability. Continued exposure to risk is inevitable until the device is replaced.
कैसे ठीक करेंअनुवाद हो रहा है…
Este dispositivo ya no recibe soporte del fabricante. Se recomienda reemplazar el dispositivo por uno actualizado y con soporte activo para mitigar el riesgo de explotación. Si no es posible, aislar el dispositivo de la red y deshabilitar el acceso remoto.
CVE सुरक्षा न्यूज़लेटर
भेद्यता विश्लेषण और गंभीर अलर्ट सीधे आपके ईमेल में।
अक्सर पूछे जाने वाले सवालअनुवाद हो रहा है…
What is CVE-2026-5815 — Buffer Overflow in D-Link DIR-645 Router?
It's a unique identifier for this security vulnerability.
Am I affected by CVE-2026-5815 in D-Link DIR-645 Router?
The DIR-645 is an older model and has reached the end of its support lifecycle.
How do I fix CVE-2026-5815 in D-Link DIR-645 Router?
Isolate the router from the main network and monitor for suspicious activity.
Is CVE-2026-5815 being actively exploited?
No, due to the public vulnerability and lack of support, it is not safe.
Where can I find the official D-Link DIR-645 Router advisory for CVE-2026-5815?
Look for unusual network activity, such as unexpected data traffic or unknown devices.
क्या आपका प्रोजेक्ट प्रभावित है?
अपनी डिपेंडेंसी फ़ाइल अपलोड करें और तुरंत जानें कि यह CVE और अन्य आपको प्रभावित करती हैं या नहीं।