CVE-2025-60548

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings

Critical · published October 24, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in the D-Link DIR-600L router could let attackers take full control of your device with just a single malformed request! Think of it like a delivery box that overflows with too many packages; if the delivery person isn’t careful, they might just hand over the whole box without checking! This vulnerability could allow hackers to execute arbitrary code, leaving your network wide open to exploits—think of it as leaving your front door ajar and inviting unwanted guests in. Without proper defenses, they could intercept your data, change network settings, or even launch further attacks from your device. Absolutely devastating!

Put simply

Think of it like a delivery box that overflows with too many packages; if the delivery person isn’t careful, they might just hand over the whole box without checking! The buffer overflow occurs via the 'curTime' parameter in the 'formLanSetupRouterSettings' function, allowing attackers to overwrite memory and execute malicious code without any authentication.

What to do

This vulnerability could allow hackers to execute arbitrary code, leaving your network wide open to exploits—think of it as leaving your front door ajar and inviting unwanted guests in. Without proper defenses, they could intercept your data, change network settings, or even launch further attacks from your device. Absolutely devastating! Immediately update your D-Link DIR-600L router firmware to the latest version provided by D-Link to patch this vulnerability. It’s crucial to regularly check for firmware updates and implement strong passwords to secure your devices. Don’t forget to disable any unnecessary services that could expose vulnerabilities! You’ve got this! Follow these steps, and you’ll have your router fortified in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings
    cvelistv5