Skip to main content
CRITICAL CISA KEV

CVE-2022-37055

CVSS v3

9.8

CRITICAL

EPSS Score

69.8 %

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

CISA Known Exploited Vulnerability

Date Added
2025-12-08
Patch Due Date
2025-12-29
Ransomware Use
Unknown

Technical details

Published
2022-08-28

Frequently asked questions

What is CVE-2022-37055?

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

Is CVE-2022-37055 actively exploited?

Yes. CVE-2022-37055 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 2025-12-29.

What is the CVSS score for CVE-2022-37055?

CVE-2022-37055 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2022-37055 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

No credit card required · 500 free checks/month · Free API key