CVE-2022-37055

Think of your router like the building’s front desk: it has ways to accept requests and process commands. This flaw is a “too-long input” bug in the router’s built-in interfaces, which can let an attacker overwhelm the router and potentially take control. If that happens, your business internet connection can be disrupted and attackers may be able to interfere with your network traffic.

This matters if your business uses a D-Link Go-RT-AC750 router running the vulnerable go-rt-ac750 firmware revisions referenced for CVE-2022-37055 (revA v101b03 or revB v200b02). Because this is listed by CISA as known exploited, you should assume there is a real risk in the wild.

It’s a risk when the vulnerable router firmware is in use and the affected router services are reachable from an attacker (for example, accessible over the network/internet).

This is urgent because CISA has confirmed it as known exploited (listed in the KEV catalog). Attackers are actively using this buffer-overflow weakness against affected router firmware, so leaving it unpatched exposes your network to takeover and disruption.