D-Link DIR-645 Router Series CVE-2015-2051 Remote Arbitrary Command Execution Vulnerability

Bugtraq ID:	74870
Class:	Unknown
CVE:	CVE-2015-2051
Remote:	Yes
Local:	No
Published:	Feb 23 2015 12:00AM
Updated:	Jul 15 2015 12:39AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

D-Link DIR-645 Router Series CVE-2015-2051 Remote Arbitrary Command Execution Vulnerability

D-Link DIR-645 Router Series are prone to a remote arbitrary command-execution vulnerability.

An attacker can execute arbitrary commands with the privileges of the user running the affected device.

D-Link DIR-645 Router Series CVE-2015-2051 Remote Arbitrary Command Execution Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

The following metasploit exploit is available:

• /data/vulnerabilities/exploits/74870.rb

D-Link DIR-645 Router Series CVE-2015-2051 Remote Arbitrary Command Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

D-Link DIR-645 Router Series CVE-2015-2051 Remote Arbitrary Command Execution Vulnerability

References:

• D-Link Homepage (D-Link)