GF
Product
Go-rt-ac750 Firmware
On CISA KEVExploited in the wild
15
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 2Medium 1Low 0
Watch
Add Go-rt-ac750 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-37055 In wildKEV | 9.8 | Aug 28 | D-Link Routers Buffer Overflow Vulnerability Affected: 2.00b02; 1.01b03 |
| CVE-2024-27683 | 9.8 | Apr 11 | D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main Affected: 101b03 |
| CVE-2024-22853 | 9.8 | Feb 6 | D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session Affected: 101b03 |
| CVE-2024-22852 | 9.8 | Feb 6 | D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main Affected: 101b03 |
| CVE-2024-22916 | 9.8 | Jan 16 | In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow Affected: 101b03 |
| CVE-2023-48842 | 9.8 | Dec 1 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi Affected: 101b03 |
| CVE-2023-34800 | 9.8 | Jun 15 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main Affected: reva_1.01b03 |
| CVE-2023-26822 | 9.8 | Apr 1 | D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main Affected: reva_v101b03 |
| CVE-2022-37056 | 9.8 | Aug 28 | D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main, Affected: 2.00b02; 1.01b03 |
| CVE-2022-37057 | 9.8 | Aug 28 | D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main Affected: 2.00b02; 1.01b03 |
| CVE-2022-36525 | 9.8 | Aug 15 | D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main Affected: 101b03; 200b02 |
| CVE-2022-36523 | 9.8 | Aug 15 | D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php Affected: 101b03; 200b02 |
| CVE-2022-36526 | 7.5 | Aug 15 | D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin Affected: 101b03; 200b02 |
| CVE-2022-36524 | 7.5 | Aug 15 | D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh Affected: 101b03; 200b02 |
| CVE-2024-27684 | 6.1 | Mar 4 | A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote attackers to inject… Affected: 101b03 |
Showing 15
