CVE-2022-37055

CRITICAL KEV

D-Link Go-RT-AC750 Firmware - Buffer Overflow via cgibin hnap_main

Title source: llm

CVE-2022-37055 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 8, 2025.

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

Core 5

Core References

Exploit, Patch, Third Party Advisory

Vendor Advisory

Vendor Advisory

US Government Resource

Third Party Advisory

CVSS v3 9.8

EPSS 0.8188

EPSS Percentile 99.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation active

Automatable yes

Technical Impact total

CISA KEV 2025-12-08

VulnCheck KEV 2024-05-24

ENISA EUVD EUVD-2022-39709

CWE

CWE-120

Status published

Products (2)

dlink/go-rt-ac750_firmware 2.00b02

dlink/go-rt-ac750_firmware 1.01b03

Published Aug 28, 2022

KEV Added Dec 08, 2025

Tracked Since Feb 18, 2026