CVE-2025-60547

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A buffer overflow lurking in D-Link's DIR600L could let an attacker crash your network, just by tweaking a parameter! Think of this as a restaurant where an overzealous customer is allowed to order items beyond the menu's capacity — it can lead to chaos in the kitchen! An attacker could potentially exploit this vulnerability to crash the router, leading to a complete loss of network connectivity. Imagine trying to stream your favorite show when suddenly, poof! Your internet disappears. This could also open the door for other malicious actions, putting your network and data at risk.

Put simply

Think of this as a restaurant where an overzealous customer is allowed to order items beyond the menu's capacity — it can lead to chaos in the kitchen! The vulnerability stems from a buffer overflow in the 'curTime' parameter of the 'formSetWAN_Wizard7' function, allowing attackers to overwrite memory and potentially execute arbitrary code.

What to do

An attacker could potentially exploit this vulnerability to crash the router, leading to a complete loss of network connectivity. Imagine trying to stream your favorite show when suddenly, poof! Your internet disappears. This could also open the door for other malicious actions, putting your network and data at risk. To remediate this vulnerability, update the firmware on your D-Link DIR600L to the latest version available. It's crucial to monitor your devices regularly and ensure they're not running outdated software to maintain a strong security posture. You've got this! By taking these steps, you'll have your network secured in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7
    cvelistv5