Actively exploited in the wild
D-Link Routers Buffer Overflow Vulnerability
D-Link - Routers · Listed in the CISA KEV since 2025-12-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2022-37055
CriticalCVSS 9.8KEVSummary
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main.
Risk Assessment
An attacker could exploit the buffer overflow to execute arbitrary code or cause a denial of service, potentially leading to compromise of the router. This could result in network security breaches.
Recommendation
Check if the manufacturer has released a firmware update and apply it immediately if available. Otherwise, consider decommissioning the device or restricting access to its management interface.
Other vulnerabilities in D-Link Go-RT-AC750
See all- CVE-2022-36526High
D-Link GO-RT-AC750 routers with firmware versions GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to authentication bypass. The flaw resides in the phpcgi_main function within cgibin.
- CVE-2022-36524High
The D-Link GO-RT-AC750 devices with firmware versions GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 contain static default credentials stored in the /etc/init0.d/S80telnetd.sh script. This allows unauthorized access to the Telnet service using default credentials.
Original NVD description (English source)
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,