This host is running D-Link DIR-645 Router and is prone to authentication bypass vulnerability.

Successful exploitation will allow attacker to retrieve the administrator password and then access the device with full privileges. This will allow an attacker to launch further attacks. Impact Level: Application

Upgrade to D-Link DIR-645 firmware version 1.03 or later, For updates refer to http://www.dlink.com/ca/en/home-solutions/connect/routers/dir-645-wireless-n-home-router-1000

The web interface of D-Link DIR-645 routers expose several pages accessible with no authentication. These pages can be abused to access sensitive information concerning the device configuration, including the clear-text password for the administrative user.

D-Link DIR-645 firmware version prior to 1.03

• http://packetstormsecurity.com/files/120591
• http://seclists.org/bugtraq/2013/Feb/150

---

Updated on 2015-03-25