D-Link Go-Rt-AC750 Firmware vulnerabilities

15 CVEs affecting D-Link Go-Rt-AC750 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27683, published 2024-04-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-37055: D-Link Routers Buffer Overflow Vulnerability, published 2022-08-28. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2025-12-08. EPSS: 55.5% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
CVE-2023-34800, published 2023-06-15. Critical severity, CVSS 9.8. EPSS: 29.3% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.
CVE-2022-37057, published 2022-08-28. Critical severity, CVSS 9.8. EPSS: 25.6% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.
CVE-2022-37056, published 2022-08-28. Critical severity, CVSS 9.8. EPSS: 10.4% chance of exploitation in the next 30 days. D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main,
CVE-2024-22853, published 2024-02-06. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session.
CVE-2023-48842, published 2023-12-01. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.
CVE-2023-26822, published 2023-04-01. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
CVE-2022-36523, published 2022-08-15. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.
CVE-2022-36525, published 2022-08-15. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main.
CVE-2022-36526, published 2022-08-15. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.

Latest

CVE-2024-27683, published 2024-04-11. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.
CVE-2024-27684, published 2024-03-04. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote attackers to inject arbitrary web script or…
CVE-2024-22852, published 2024-02-06. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to enable telnet service via a specially crafted…
CVE-2024-22916, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.