D-Link Routers Buffer Overflow Vulnerability

KRITISCH 9.8EXPLOITED (CISA KEV)CVE-2022-37055 · Published 28/08/2022 · updated 17/06/2026

D-Link Routers Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/12/2025. Patch affected systems as an emergency.

Kurz gesagt

CVE-2022-37055 ist eine Schwachstelle (KRITISCH (CVSS 9.8)).
Wird aktiv ausgenutzt: CISA hat sie am 08/12/2025 in den KEV-Katalog aufgenommen.
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 55.5%, höher als bei 99.0% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
Routers D-Link	Versions not published yet (product named by CISA KEV)

Description

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

References

drive.google.com/file/d/1hmIk0jQoex4QDyjIUg_6yxi-J6ROCh8S/view · Exploit
supportannouncement.us.dlink.com/security/publication.aspx · Vendor Advisory
dlink.com/en/security-bulletin · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
fortiguard.com/outbreak-alert/d-link-multiple-devices-attack · Third Party Advisory
CISA KEV · CVE-2022-37055

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free