D-Link · Routers
CVE-2022-37055
D-Link Routers Buffer Overflow Vulnerability
What it is
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
CISA: D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Deadline for US federal agencies: December 29, 2025
More exploited flaws from D-Link
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Apr 24, 2026 | Command Injection | DIR-823X | High 7.2 | 88% |
| Aug 5, 2025 | Unspecified | DCS-2530L and DCS-2670L Devices | High 7.5 | 98% |
| Aug 5, 2025 | DCS-2530L and DCS-2670L Command Injection | DCS-2530L and DCS-2670L Devices | High 8.8 | 54% |
| Aug 5, 2025 | Download of Code Without Integrity Check | DNR-322L | High 8.8 | 34% |
| Jun 25, 2025 | D-Link DIR-859 Router Path Traversal | DIR-859 Router | Medium 5.3 | 83% |
| Sep 30, 2024 | OS Command Injection | DIR-820 Router | Critical 9.8 | 98% |
| May 16, 2024 | Information Disclosure | DIR-605 Router | High 7.5 | 87% |
| May 16, 2024 | Cross-Site Request Forgery (CSRF) | DIR-600 Router | High 8.0 | 43% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.