Findings

CVE-2022-37055

D-Link Routers Buffer Overflow Vulnerability

Published Aug 28, 2022 · updated Jun 16, 2026 · D-Link Routers

D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 28, 2022 · Catalog

    Detected

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  2. Dec 8, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Dec 29, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Dec 29, 2025

Affected

  • cpe dlink/go-rt-ac750 firmware1.01b03
  • cpe dlink/go-rt-ac750 firmware2.00b02
  • vendor D-Link Routersversion unspecified

Sources

  • CISA KEVCVE-2022-37055

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    cisa.gov
  • CVE.orgCVE-2022-37055

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2022-37055

    30-day exploitation probability 55.5%

    first.org
  • NIST NVDCVE-2022-37055

    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

    nvd.nist.gov

References

CVE-2022-37055 · ZeroDay Findings