CVE-2025-60551

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow could let attackers take over your D-Link router! The next_page parameter in the formDeviceReboot function is your weak point. 🔥 Think of this like a waiter misreading a big order at a restaurant—if they accidentally take in a dish that's far too large, it can overwhelm the kitchen and cause chaos. Here, a crafted input could overflow the device's memory, potentially letting attackers serve up malicious commands instead! If exploited, this vulnerability could allow attackers to gain control of the router, manipulate network traffic, or even execute arbitrary code. This could lead to unauthorized access to your home network and connected devices, making it a serious threat that you don't want lurking around!

Put simply

Think of this like a waiter misreading a big order at a restaurant—if they accidentally take in a dish that's far too large, it can overwhelm the kitchen and cause chaos. Here, a crafted input could overflow the device's memory, potentially letting attackers serve up malicious commands instead! This CVE highlights a buffer overflow in the D-Link DIR600L router firmware due to improper handling of the next_page parameter during a reboot function. Without adequate input validation, attackers can send oversized data that disrupts the device's memory, leading to potential exploitation.

What to do

If exploited, this vulnerability could allow attackers to gain control of the router, manipulate network traffic, or even execute arbitrary code. This could lead to unauthorized access to your home network and connected devices, making it a serious threat that you don't want lurking around! To protect your network, immediately update your router's firmware to the latest version that addresses this vulnerability. Additionally, consider disabling remote management if it's not needed, and regularly review your network settings for any anomalies. 🛡️ You've got this! With a few quick updates, your network will be back in safe hands. 🚀

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot
    cvelistv5