CVE-2025-60555

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in the D-Link DIR600L, where the curTime parameter could let an attacker mess with your device like a prankster sneaking into a party! Think of it like a restaurant where the chef accidentally lets diners change their own orders—too much of the wrong ingredient can ruin the whole dish. Here, the buffer overflow means that an attacker can overwrite memory, causing unexpected behavior—yikes! An attacker could potentially crash the router or execute malicious code, leaving your network vulnerable to all sorts of threats. It's like leaving the backdoor wide open and inviting trouble in! If exploited, this could lead to a compromised network, which is absolutely devastating for your connected devices.

Put simply

Think of it like a restaurant where the chef accidentally lets diners change their own orders—too much of the wrong ingredient can ruin the whole dish. Here, the buffer overflow means that an attacker can overwrite memory, causing unexpected behavior—yikes! The vulnerability stems from a lack of proper bounds checking in the formSetWizardSelectMode function, allowing excessive data input through the curTime parameter, leading to memory corruption.

What to do

An attacker could potentially crash the router or execute malicious code, leaving your network vulnerable to all sorts of threats. It's like leaving the backdoor wide open and inviting trouble in! If exploited, this could lead to a compromised network, which is absolutely devastating for your connected devices. To protect your network, update the firmware to the latest version immediately. If you’re still running FW116WWb01, it’s time to patch up and secure your device! Be sure to review your router settings for any other potential vulnerabilities as well. You've got this! With these simple steps, you'll be back in control and fortifying your network in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode
    cvelistv5