CVE-2022-36526
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
D-Link GO-RT-AC750 routers with firmware versions GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to authentication bypass. The flaw resides in the phpcgi_main function within cgibin.
Risk Assessment
An unauthenticated attacker can gain unauthorized access to the router's administrative interface, leading to full device and network compromise.
Recommendation
Immediately update the router firmware to the latest available version or replace the device with a supported model.
Other vulnerabilities in D-Link GO-RT-AC750
See all- CVE-2022-37055CriticalActively exploited
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main.
- CVE-2022-36524High
The D-Link GO-RT-AC750 devices with firmware versions GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 contain static default credentials stored in the /etc/init0.d/S80telnetd.sh script. This allows unauthorized access to the Telnet service using default credentials.
Original NVD description (English source)
D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.