CVE-2015-2051

D-Link DIR-645 routers allow remote attackers to execute arbitrary commands via the HNAP interface, a flaw actively exploited in the wild.

The DIR-645 router's HNAP interface permits remote code execution without authentication, enabling attackers to take full control of the device. DIB organizations must care because unpatched RCE flaws in networking hardware are frequently exploited in the wild, leading to botnet recruitment, lateral movement, and compromised network perimeters. Organizations should replace legacy D-Link hardware, enforce strict network segmentation, and monitor for known exploit signatures.

Shame score — D-Link repeatedly ships firmware with critical RCE flaws that remain unpatched for extended periods and are actively exploited in the wild, demonstrating a systemic failure in vulnerability management and a negligent disregard for customer security.