CVE-2025-60557

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

⚡ A mischievous buffer overflow is hiding in the D-Link DIR600L firmware! Just a single crafty parameter can set off a chain reaction of chaos. 🔥 Think of it like a soda bottle that’s shaken just enough before popping the cap — one wrong move and it explodes! In this case, the curTime parameter is the culprit that can overflow and cause a service meltdown. If exploited, an attacker could manipulate this overflow to execute arbitrary code, potentially giving them full control over your router. Imagine your home network being hijacked, leaving your devices vulnerable to all sorts of malicious activities. It’s a recipe for disaster!

Put simply

Think of it like a soda bottle that’s shaken just enough before popping the cap — one wrong move and it explodes! In this case, the curTime parameter is the culprit that can overflow and cause a service meltdown. This vulnerability occurs in the formSetEasy_Wizard function, which mishandles input from the curTime parameter, leading to a buffer overflow. This flaw allows an attacker to overwrite the memory and execute harmful commands.

What to do

If exploited, an attacker could manipulate this overflow to execute arbitrary code, potentially giving them full control over your router. Imagine your home network being hijacked, leaving your devices vulnerable to all sorts of malicious activities. It’s a recipe for disaster! To secure your router, immediately update the firmware to the latest version provided by D-Link. It’s crucial to monitor your network for any unusual activity as an added precaution. And don't forget to change default passwords if you haven’t already! You've got this! Follow these steps, and you'll have your router shielded in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.5th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard
    cvelistv5