Description
D-Link DIR-645是中国友讯（D-Link）公司的一款无线路由器。 D-Link DIR-645 105B01版本存在命令注入漏洞，该漏洞源于对文件/soap.cgi中参数service的错误操作，可能导致远程命令注入。
D-Link DIR-645 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.anquanke.com/post/id/178279
https://blog.csdn.net/yalecaltech/article/details/117299537
https://nosec.org/m/share/4844.html
https://www.cnvd.org.cn/patchInfo/show/55727
https://bbs.kanxue.com/thread-224917.htm
https://cloud.tencent.com/developer/article/2483211
https://www.exploit-db.com/exploits/24956
https://helpcenter.trendmicro.com/en-us/article/tmka-20701
https://www.rapid7.com/db/modules/exploit/linux/http/dlink_diagnostic_exec_noauth/
https://nvd.nist.gov/vuln/detail/cve-2015-2051
https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/dlink/dir_645_815_rce.py