Buffer Overflow in D-Link Go-RT-AC750 routers

Successful exploitation can lead to memory corruption and remote code execution on the affected router. An attacker who gains code execution may be able to take control of the device, intercept or manipulate traffic traversing it, use it as a foothold for lateral movement, or conscript it into botnet activity and other follow-on malicious operations. Active exploitation has been reported.

If immediate replacement is not possible, reduce exposure by removing administrative interfaces from untrusted networks, restricting access to trusted management networks only, disabling unnecessary remote management features, enforcing strong unique administrative credentials, and monitoring the devices for signs of compromise. Network segmentation and isolation of affected routers can reduce downstream risk until the hardware is replaced. Firmware integrity checks may help identify tampering, but they do not eliminate the underlying vulnerability.

No official vendor patch is available for the affected end-of-life D-Link Go-RT-AC750 models and firmware versions identified for this vulnerability. The recommended remediation is to retire and replace affected devices with supported hardware receiving security updates. Organizations should identify exposed instances of the affected models and remove them from service where possible.