CVE-2025-60569

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
42.9
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow awaits in the D-Link DIR600L Ax FW116WWb01! Just a little manipulation of the curTime parameter can open the door for chaos! 🔥 Think of it like a restaurant where a customer can order more food than the kitchen can handle. If the kitchen isn’t careful, they might just serve double orders, causing a messy food fight instead of a tidy meal! An attacker could exploit this flaw to overwrite memory, potentially leading to arbitrary code execution. This could allow them to take control of the router, intercept data, or manipulate network traffic—definitely not the kind of dinner party you want to host!

Put simply

Think of it like a restaurant where a customer can order more food than the kitchen can handle. If the kitchen isn’t careful, they might just serve double orders, causing a messy food fight instead of a tidy meal! This vulnerability stems from a buffer overflow in the formSetRoute function triggered by the curTime parameter, allowing attackers to disrupt normal operations and possibly execute malicious code.

What to do

An attacker could exploit this flaw to overwrite memory, potentially leading to arbitrary code execution. This could allow them to take control of the router, intercept data, or manipulate network traffic—definitely not the kind of dinner party you want to host! Immediately patch the D-Link firmware to the latest version to close this security gap. Additionally, review your device settings to ensure any extraneous access points are tightly controlled. Stay vigilant! You've got this! Fixing this vulnerability will have your network back on track in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00514 · 42.9th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute
    cvelistv5