CVE-2025-60558

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

🚨 A sneaky buffer overflow lurks in the D-Link DIR600L Ax's firmware! When attackers manipulate the curTime parameter, they can trip the system like a careless waiter spilling a tray of drinks. ⚡ Think of this vulnerability as a restaurant where a server accidentally overfills a glass. Just like that glass overflowing can make a mess, this buffer overflow can cause the device to crash or behave unexpectedly, creating opportunities for malicious exploits. If exploited, an attacker could potentially crash the router or cause unexpected behavior, leading to a loss of network service or even unauthorized access. This is no small matter; it could disrupt your home or office connectivity and expose your sensitive information.

Put simply

Think of this vulnerability as a restaurant where a server accidentally overfills a glass. Just like that glass overflowing can make a mess, this buffer overflow can cause the device to crash or behave unexpectedly, creating opportunities for malicious exploits. This CVE involves a buffer overflow in the D-Link DIR600L Ax router's firmware, occurring through the curTime parameter in the formVirtualServ function, allowing attackers to bypass normal controls and execute arbitrary code.

What to do

If exploited, an attacker could potentially crash the router or cause unexpected behavior, leading to a loss of network service or even unauthorized access. This is no small matter; it could disrupt your home or office connectivity and expose your sensitive information. Update your D-Link DIR600L Ax to the latest firmware version released by the vendor to remedy this vulnerability. Ensure that unnecessary features are disabled, and consider implementing network segmentation to limit exposure. You've got this! Secure your device today and keep your network safe. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ
    cvelistv5