CVE-2025-60554

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard

Critical · published October 24, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow in D-Link's DIR600L could turn your router into a playground for attackers! Think of this like a water pipe that’s too full; if you keep adding water without managing the pressure, it’s bound to burst. Here, the curTime parameter is that overflowing pipe, and when it bursts, attackers can take control of your device. If exploited, an attacker could inject malicious code, gaining unauthorized access to your network, and wreaking havoc on your devices. Imagine them having the power to intercept your communications, change settings, or even knock devices offline – absolutely devastating!

Put simply

Think of this like a water pipe that’s too full; if you keep adding water without managing the pressure, it’s bound to burst. Here, the curTime parameter is that overflowing pipe, and when it bursts, attackers can take control of your device. This vulnerability arises due to a buffer overflow in the function formSetEnableWizard, triggered by an improperly handled curTime parameter, allowing attackers to execute arbitrary code.

What to do

If exploited, an attacker could inject malicious code, gaining unauthorized access to your network, and wreaking havoc on your devices. Imagine them having the power to intercept your communications, change settings, or even knock devices offline – absolutely devastating! To protect your network, immediately update the D-Link DIR600L to the latest firmware version that addresses this vulnerability. Regularly check for updates and consider changing default settings to strengthen your security posture. You've got this! Take these steps and you'll keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.3th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard
    cvelistv5