ZeroDay Findings
Sign inSign up

Findings

CVE-2022-37055

D-Link Routers Buffer Overflow Vulnerability

Published Aug 28, 2022 · updated Jun 16, 2026 · D-Link Routers

D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 28, 2022 · Catalog

    Detected

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  2. Dec 8, 2025 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Dec 29, 2025 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Dec 29, 2025

Affected

  • cpe dlink/go-rt-ac750 firmware1.01b03
  • cpe dlink/go-rt-ac750 firmware2.00b02
  • vendor D-Link Routersversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2022-37055

    D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2022-37055

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2022-37055

    30-day exploitation probability 55.5%

    first.org
  • NIST NVDVulnerability recordCVE-2022-37055

    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

    nvd.nist.gov

References