CVE-2025-60566

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

⚡ Just one rogue input in the curTime parameter could trigger a buffer overflow on the D-Link DIR600L, allowing chaos to unfold! 🔥 Think of it as a restaurant where one inattentive waiter serves up a dish that’s just too big for the table — it spills over and could cause a mess. In this case, the overflow can let attackers execute arbitrary code, potentially turning your router into a playground for malicious activities. If exploited, this vulnerability could allow an attacker to manipulate the device's memory, leading to unauthorized actions like executing malicious commands or even taking complete control of your home network. That's a recipe for disaster, as it can jeopardize your privacy and security.

Put simply

Think of it as a restaurant where one inattentive waiter serves up a dish that’s just too big for the table — it spills over and could cause a mess. In this case, the overflow can let attackers execute arbitrary code, potentially turning your router into a playground for malicious activities. This vulnerability arises from a buffer overflow in the formSetMACFilter function, where the curTime parameter fails to properly validate input, allowing excess data to overwrite adjacent memory space.

What to do

If exploited, this vulnerability could allow an attacker to manipulate the device's memory, leading to unauthorized actions like executing malicious commands or even taking complete control of your home network. That's a recipe for disaster, as it can jeopardize your privacy and security. To protect your network, patch your D-Link DIR600L to the latest firmware version available. Regularly monitor for updates and review your router's configuration to ensure all security features are enabled. Don’t forget to check the manufacturer’s website for specific instructions! You've got this! Follow these steps, and you'll have your router secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.2th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter
    cvelistv5