CVE-2025-60550

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow in D-Link's DIR600L could leave your device wide open! Just a simple tweak to the curTime parameter and an attacker could take control. 🚨 Think of it like a waiter at a restaurant who never checks the orders — they just keep serving whatever shows up without verifying if it's actually what the customer wanted. That's how the buffer overflow issue allows an attacker to inject data into the device's memory without proper checks! This vulnerability could lead to an attacker executing arbitrary code, potentially allowing them to take complete control of your router. With access to your network, they could intercept sensitive data or even launch attacks on other connected devices. That's absolutely devastating!

Put simply

Think of it like a waiter at a restaurant who never checks the orders — they just keep serving whatever shows up without verifying if it's actually what the customer wanted. That's how the buffer overflow issue allows an attacker to inject data into the device's memory without proper checks! The D-Link DIR600L Ax FW116WWb01 has a buffer overflow vulnerability in the formEasySetTimezone function, triggered by improper handling of the curTime parameter, allowing for memory corruption.

What to do

This vulnerability could lead to an attacker executing arbitrary code, potentially allowing them to take complete control of your router. With access to your network, they could intercept sensitive data or even launch attacks on other connected devices. That's absolutely devastating! Update your D-Link DIR600L router firmware to the latest version as soon as possible to patch this vulnerability. Regularly check for firmware updates and change default login credentials to strengthen your defense against such exploits. You've got this! Stay vigilant and keep your devices secure! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone
    cvelistv5