CVE-2022-37055

Think of your router like the building’s front desk: it has ways to accept requests and process commands. This flaw is a “too-long input” bug in the router’s built-in interfaces, which can let an attacker overwhelm the router and potentially take control. If that happens, your business internet connection can be disrupted and attackers may be able to interfere with your network traffic.

This matters if your business uses a D-Link Go-RT-AC750 router running the vulnerable go-rt-ac750 firmware revisions referenced for CVE-2022-37055 (revA v101b03 or revB v200b02). Because this is listed by CISA as known exploited, you should assume there is a real risk in the wild.

It’s a risk when the vulnerable router firmware is in use and the affected router services are reachable from an attacker (for example, accessible over the network/internet).

This is urgent because CISA has confirmed it as known exploited (listed in the KEV catalog). Attackers are actively using this buffer-overflow weakness against affected router firmware, so leaving it unpatched exposes your network to takeover and disruption.

Confirm whether you’re affected

• Log into your router admin interface and note the exact firmware version/build.
• Verify whether it matches one of the vulnerable versions called out for CVE-2022-37055 (Go-RT-AC750 revA_v101b03 and GO-RT-AC750_revB_FWv200b02).

Patch (preferred remediation)

• Apply the official D-Link remediation from the vendor security materials for CVE-2022-37055.
• After updating, reboot the router.

If you cannot patch

• Follow the CISA KEV guidance: discontinue use of the product if mitigations are unavailable.
• Replace the router with a non-vulnerable model/firmware.

Deadline / required action timing

• CISA remediation due date for KEV action is 2025-12-29.

What to monitor after updating

• Confirm the router comes back up normally and that internet connectivity is stable.
• Review any available router logs for unexpected crashes or repeated requests to the router’s web interfaces around the time you observed problems (if you have access to logs).

CVE-2022-37055 (CWE-120) is a buffer overflow in D-Link go-rt-ac750 firmware, involving request handling in code paths exposed via cgibin and hnap_main. The weakness can be triggered by sending specially crafted input to those endpoints, which can lead to memory corruption, resulting in impact such as device crash and potentially attacker-controlled behavior.

Exploitation status: CISA lists this CVE in its Known Exploited Vulnerabilities (KEV) catalog, which indicates real-world exploitation rather than only theoretical risk. The KEV entry provides a remediation due date of 2025-12-29.

Patch availability: D-Link has published remediation materials (SAP10308 and related security bulletin links) pointing to an official firmware update.

Exploit code: no public exploit code is on record in the provided findings, but KEV listing still makes this an actively exploited issue.

EPSS note: a prediction exists in the findings, but because KEV confirms exploitation, the practical urgency is driven by KEV rather than prediction.