D-Link Routers Buffer Overflow Vulnerability

CRITICAL 9.8EXPLOITED (CISA KEV)CVE-2022-37055 · Published 28/08/2022 · updated 17/06/2026

D-Link Routers Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/12/2025. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
Routers D-Link	Versions not published yet (product named by CISA KEV)

Description

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

References

drive.google.com/file/d/1hmIk0jQoex4QDyjIUg_6yxi-J6ROCh8S/view · Exploit
supportannouncement.us.dlink.com/security/publication.aspx · Vendor Advisory
dlink.com/en/security-bulletin · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
fortiguard.com/outbreak-alert/d-link-multiple-devices-attack · Third Party Advisory
CISA KEV · CVE-2022-37055

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free