CVE-2025-60552

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow hides in the D-Link DIR600L Ax FW116WWb01, waiting for a moment of chaos! Think of it like an overstuffed suitcase that bursts open when you try to zip it up—this vulnerability can let an attacker overflow the system's capacity, causing a disastrous spill. An attacker could exploit this buffer overflow to gain control over the device, allowing them to run arbitrary code, manipulate settings, or even hijack your entire network. The consequences could be a serious invasion of privacy and a compromised home network, making this vulnerability absolutely critical to address!

Put simply

Think of it like an overstuffed suitcase that bursts open when you try to zip it up—this vulnerability can let an attacker overflow the system's capacity, causing a disastrous spill. This buffer overflow occurs via the 'curTime' parameter in the 'formTcpipSetup' function, allowing malicious input to overflow the memory buffer and execute arbitrary code.

What to do

An attacker could exploit this buffer overflow to gain control over the device, allowing them to run arbitrary code, manipulate settings, or even hijack your entire network. The consequences could be a serious invasion of privacy and a compromised home network, making this vulnerability absolutely critical to address! To protect yourself, immediately patch your D-Link DIR600L router to the latest firmware version. Regularly check for updates and consider changing default credentials to add an extra layer of security. Don't leave your network exposed! You've got this! Follow these steps, and you'll have your network more secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup
    cvelistv5