CVE-2023-36089

CriticalCVSS 9.8

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

57th percentile - higher than 57% of all known CVEs

Summary

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin.

Risk Assessment

This vulnerability may lead to unauthorized access and privilege escalation in systems that are no longer supported by the vendor.

Recommendation

It is recommended to update the firmware to the latest version or to decommission devices that are no longer supported.

Original NVD description (English source)

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.