PT-2022-23773 · D Link · D-Link Go-Rt-Ac750

Published 2022-08-28 · Updated 2025-12-09 · CVE-2022-37057

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link GO-RT-AC750 version GORTAC750 revA v101b03 D-Link GO-RT-AC750 version GO-RT-AC750 revB FWv200b02

Description The issue allows for Command Injection via cgibin and ssdpcgi main.

Recommendations For version GORTAC750 revA v101b03, consider restricting access to the cgibin and ssdpcgi main to minimize the risk of exploitation. For version GO-RT-AC750 revB FWv200b02, consider restricting access to the cgibin and ssdpcgi main to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-37057

Affected Products

D-Link Go-Rt-Ac750

References · 6

• 🔥 https://drive.google.com/file/d/1_UUpraFTxxB97ujrgVLQZXQ8Q8M58BAF/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2022-37057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37057 · Security Note
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308 · Vendor Advisory
• https://t.me/cveNotify/145255 · Telegram Post