CVE-2025-60553

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52

Critical · published October 24, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow in D-Link's DIR600L router opens the door wide for mischief! 🔥 Think of it like a crowded restaurant where the chef accidentally adds too many ingredients to a dish — it overflows and spills everywhere, potentially ruining the meal. In this case, the overflow happens in the router's memory, causing chaos where it shouldn't be. An attacker could exploit this vulnerability to manipulate the router's memory, potentially gaining unauthorized access, changing settings, or even launching further attacks on the local network. The consequences could be absolutely devastating, as it compromises the very device managing your internet connection!

Put simply

Think of it like a crowded restaurant where the chef accidentally adds too many ingredients to a dish — it overflows and spills everywhere, potentially ruining the meal. In this case, the overflow happens in the router's memory, causing chaos where it shouldn't be. This buffer overflow occurs through the curTime parameter in the formSetWAN_Wizard52 function, allowing an attacker to overwrite memory locations and execute arbitrary code.

What to do

An attacker could exploit this vulnerability to manipulate the router's memory, potentially gaining unauthorized access, changing settings, or even launching further attacks on the local network. The consequences could be absolutely devastating, as it compromises the very device managing your internet connection! Immediately patch the D-Link DIR600L with the latest firmware update from the manufacturer. Review your router settings and consider changing default login credentials. Don’t forget to keep your network security protocols updated! You’ve got this! Secure your network now and keep your digital fortress safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52
    cvelistv5