CVE-2022-37057
CRITICALD-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 - OS Command Injection via cgibin
Title source: llmDescription
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.
References (3)
Core 3
Core References
Exploit, Patch, Third Party Advisory
https://drive.google.com/file/d/1_UUpraFTxxB97ujrgVLQZXQ8Q8M58BAF/view?usp=sharing
Vendor Advisory
https://www.dlink.com/en/security-bulletin/
Scores
CVSS v3
9.8
EPSS
0.3182
EPSS Percentile
96.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-78
Status
published
Products (2)
dlink/go-rt-ac750_firmware
2.00b02
dlink/go-rt-ac750_firmware
1.01b03
Published
Aug 28, 2022
Tracked Since
Feb 18, 2026