CVE-2025-60559

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in the D-Link DIR600L router, thanks to the curTime parameter! This flaw could easily allow an attacker to destabilize your device and wreak havoc. 🔥 Think of it like a busy restaurant kitchen where one of the chefs uses a pan that's too small for the dish—overflowing ingredients might ruin the meal and cause chaos among the staff! An attacker exploiting this vulnerability could potentially crash the router, disrupting your network and leaving it vulnerable to further attacks. In the worst-case scenario, they could even execute arbitrary code, taking full control of your device. That's absolutely devastating for your home security!

Put simply

Think of it like a busy restaurant kitchen where one of the chefs uses a pan that's too small for the dish—overflowing ingredients might ruin the meal and cause chaos among the staff! This vulnerability arises from a buffer overflow in the formSetDomainFilter function when it processes the curTime parameter, allowing attackers to manipulate memory allocation and potentially execute malicious code.

What to do

An attacker exploiting this vulnerability could potentially crash the router, disrupting your network and leaving it vulnerable to further attacks. In the worst-case scenario, they could even execute arbitrary code, taking full control of your device. That's absolutely devastating for your home security! To secure your system, patch your D-Link DIR600L router immediately by updating to the latest firmware version available. Additionally, regularly check for updates to ensure you’re always protected against such vulnerabilities. You've got this! With these steps, you'll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter
    cvelistv5