# CVE-2022-37055

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

- Page: https://www.vulneraibility.com/cve/CVE-2022-37055
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2025-12-08; CISA due date 2025-12-29
- EPSS: 55.53%
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-12-08)
- Weakness: CWE-120
- Published: 2022-08-28

## Affected

- dlink:go-rt-ac750_firmware

## References

- [other] https://www.dlink.com/en/security-bulletin/
- [other] https://drive.google.com/file/d/1hmIk0jQoex4QDyjIUg_6yxi-J6ROCh8S/view?usp=sharing
- [other] https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308
- [advisory] https://www.fortiguard.com/outbreak-alert/d-link-multiple-devices-attack
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-37055

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.