Is the D-Link DIR-645 still getting security updates?

The D-Link DIR-645 stopped receiving security updates on 31 December 2018. New vulnerabilities will not be fixed.

The date after which a device gets no more security fixes is also called its end of life (EOL) or end of support.

No longer supported

Security updates ended on

31 December 2018
Device
D-Link DIR-645 (router)
Basis
Official end date published by the manufacturer.
As written
12/31/2018
Source
D-Link | Legacy Products (Model / Last Day of Support) (United States)

What to do. Attackers are using known flaws in this model. Replace it. Until then, turn off remote administration and UPnP, and keep it off the Internet.

Vulnerabilities attackers are using

The U.S. cybersecurity agency (CISA) lists these vulnerabilities as actively exploited. Its description names the affected hardware versions when they are known.

  • CVE-2015-2051: D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.

Support timeline

201720192021202320252027All versionsToday
Security updates per hardware version, to scale. The bar ends on the manufacturer's date.

Questions

Is the D-Link DIR-645 still getting security updates?

The D-Link DIR-645 stopped receiving security updates on 31 December 2018. New vulnerabilities will not be fixed.

Is the D-Link DIR-645 affected by vulnerabilities attackers are using?

Yes. The CISA catalogue of exploited vulnerabilities lists CVE-2015-2051 for this model. Check the affected hardware versions and install the latest firmware, or replace the device if it is no longer supported.

What does end of life mean for the D-Link DIR-645?

After its end of life, the D-Link DIR-645 receives no more security fixes from D-Link. It keeps working, but any vulnerability found later stays open, which makes it an easy target once attackers know about it.

Where does this date come from?

From the manufacturer: D-Link | Legacy Products (Model / Last Day of Support). Each date is shown exactly as published.

  • DGL-3420ended 1 May 2012 Unsupported
  • DGL-4100ended 5 November 2012 Unsupported
  • DGL-4300ended 1 July 2010 Unsupported
  • DGL-4500ended 5 May 2013 Unsupported
  • DGL-5500ended 1 November 2017 Unsupported
  • DI-514ended 1 August 2007 Unsupported
  • DI-524ended 1 January 2009 Unsupported
  • DI-604ended 1 June 2008 Unsupported
  • DI-604UPended 29 December 2013 Unsupported
  • DI-614+ended 1 March 2008 Unsupported
  • DI-624ended 1 August 2010 Unsupported
  • DI-624Mended 1 June 2008 Unsupported

Every D-Link device   Routers from every brand