CVE-2025-60561

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in the D-Link DIR600L that could spell trouble! Just by tampering with the curTime parameter, an attacker could exploit this vulnerability. 🔥 Think of it like a waiter who misfiles an important order in the kitchen. When the chef gets overwhelmed, they might just whip up a dish using the wrong ingredients — in this case, it could lead to a system crash or unauthorized access! An attacker could potentially gain control over the device, manipulate settings, or even crash the system entirely! This means your D-Link could become a tool for mischief instead of a guardian of your network. Talk about a nightmare scenario!

Put simply

Think of it like a waiter who misfiles an important order in the kitchen. When the chef gets overwhelmed, they might just whip up a dish using the wrong ingredients — in this case, it could lead to a system crash or unauthorized access! This vulnerability arises from a buffer overflow when the curTime parameter is processed in the formSetEmail function, allowing an attacker to execute arbitrary code and possibly take over the device.

What to do

An attacker could potentially gain control over the device, manipulate settings, or even crash the system entirely! This means your D-Link could become a tool for mischief instead of a guardian of your network. Talk about a nightmare scenario! To protect against this issue, patch your D-Link DIR600L router to the latest firmware version. If that’s not immediately possible, consider disabling remote management features to reduce exposure. Regularly check for firmware updates to stay secure. You've got this! Follow those action steps, and you'll have your D-Link secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail
    cvelistv5