CVE-2025-60568

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

⚡ A seemingly harmless parameter is hiding a nasty buffer overflow in the D-Link DIR600L! The curTime parameter in the formAdvFirewall function could let attackers crash your device without breaking a sweat. 🔥 Think of it like a crowded restaurant where the servers keep pushing more orders through than the kitchen can handle. The kitchen, overwhelmed, drops a few plates — and in this case, those plates are your device’s stability! An attacker could exploit this vulnerability to trigger a buffer overflow, potentially leading to service crashes or even remote code execution. This means they could take control of your device, snoop on your network, or even use it for launching further attacks. Not exactly the kind of dinner party you want to host!

Put simply

Think of it like a crowded restaurant where the servers keep pushing more orders through than the kitchen can handle. The kitchen, overwhelmed, drops a few plates — and in this case, those plates are your device’s stability! This buffer overflow vulnerability occurs in the D-Link DIR600L router's firmware when the curTime parameter is processed, allowing attackers to write beyond the allocated memory space. This could enable them to manipulate system behavior or crash the router.

What to do

An attacker could exploit this vulnerability to trigger a buffer overflow, potentially leading to service crashes or even remote code execution. This means they could take control of your device, snoop on your network, or even use it for launching further attacks. Not exactly the kind of dinner party you want to host! To protect your network, update the router firmware to the latest version immediately. Make sure to check D-Link’s official website for any patches or updates related to this vulnerability. Also, consider changing default settings for added security. 🛡️ You've got this! Just follow these steps, and you'll be back to secure browsing in no time! 🚀

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall
    cvelistv5