CVE-2025-60570

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery

High · published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in the D-Link DIR600L! This vulnerability appears through the curTime parameter in the function formLogDnsquery, ready for mischief. 🔥 Think of it like an overflowing sink; when you don’t keep an eye on it, water spills everywhere, creating a mess and potential damage. Here, the buffer overflow could let an attacker push malicious data beyond the limits, causing chaos. If exploited, this vulnerability could allow an attacker to manipulate the device’s memory, leading to unauthorized actions or even remote code execution. Imagine an intruder gaining access to your secure spaces because a trivial oversight left the door ajar!

Put simply

Think of it like an overflowing sink; when you don’t keep an eye on it, water spills everywhere, creating a mess and potential damage. Here, the buffer overflow could let an attacker push malicious data beyond the limits, causing chaos. The buffer overflow occurs when the curTime parameter does not properly validate input, allowing an attacker to inject malicious data into the memory, potentially hijacking the execution flow of the device.

What to do

If exploited, this vulnerability could allow an attacker to manipulate the device’s memory, leading to unauthorized actions or even remote code execution. Imagine an intruder gaining access to your secure spaces because a trivial oversight left the door ajar! To protect your D-Link DIR600L, update to the latest firmware version as soon as possible. Always validate and sanitize user inputs to avoid such pitfalls in the future! You've got this! Update your device and make it more secure than ever! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.2th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery
    cvelistv5