CVE-2022-37055
D-Link Routers Buffer Overflow Vulnerability
Published Aug 28, 2022 · updated Jun 16, 2026 · D-Link Routers
D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Timeline
Detection, updates, and resolution for this record.
Aug 28, 2022 · Catalog
Detected
D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Dec 8, 2025 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Dec 29, 2025 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Dec 29, 2025
Affected
- cpe dlink/go-rt-ac750 firmware1.01b03
- cpe dlink/go-rt-ac750 firmware2.00b02
- vendor D-Link Routersversion unspecified
Sources
- CISA KEVCVE-2022-37055
D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
cisa.gov - CVE.orgCVE-2022-37055
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-37055
30-day exploitation probability 55.5%
first.org - NIST NVDCVE-2022-37055
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
nvd.nist.gov