CVE-2025-60564

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow has been hiding in the D-Link DIR600L router, thanks to the curTime parameter in the formSetLog function! 🚨 Think of it like a restaurant where a faulty order slips through the system — one wrong ingredient can overflow into the wrong dish, causing chaos in the kitchen! This vulnerability could allow an attacker to crash the device or even execute malicious code. If exploited, it could lead to a complete takeover of the router, giving outsiders unfettered access to your network, which is absolutely devastating!

Put simply

Think of it like a restaurant where a faulty order slips through the system — one wrong ingredient can overflow into the wrong dish, causing chaos in the kitchen! CVE-2025-60564 is a buffer overflow vulnerability where the curTime parameter in the formSetLog function does not properly validate input size, allowing attackers to overwrite adjacent memory.

What to do

This vulnerability could allow an attacker to crash the device or even execute malicious code. If exploited, it could lead to a complete takeover of the router, giving outsiders unfettered access to your network, which is absolutely devastating! To guard against this vulnerability, update your D-Link DIR600L router firmware to the latest version as soon as it's available. Regularly audit your device settings and ensure that only necessary services are running to minimize exposure. 🛡️ You're on the right track! With a quick firmware update, you can lock down your router and be the hero of your network! 💪✨

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog
    cvelistv5