CISA Warns of D-Link Routers Buffer Overflow Vulnerability Exploited in Attacks

CISA added CVE-2022-37055—a critical (CVSS 9.8) buffer overflow in D-Link routers—to its Known Exploited Vulnerabilities catalog after observed active exploitation; the flaw enables unauthenticated remote code execution and poses severe risks to confidentiality, integrity, and availability, especially for end-of-life devices that lack vendor updates. The advisory mandates remediation, recommends applying vendor patches or discontinuing vulnerable equipment, and urges inventory audits, network segmentation, access restrictions, and enhanced monitoring while replacement timelines are enacted.