CVE-2025-60572

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork

High ยท published October 24, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

โšก A sneaky buffer overflow lurks in the D-Link DIR600L, ready to wiggle its way into your network! ๐Ÿ” Think of it as a delivery driver trying to stuff an oversized package into a mailbox โ€” if the box is too full, things start spilling out, and the contents can end up anywhere they shouldn't. In this case, the curTime parameter is the package that gets out of control! An attacker could exploit this vulnerability to manipulate the device's memory, potentially leading to unauthorized access or even complete control over the router. This is absolutely devastating for your home or office network, as it opens the door for further attacks on connected devices!

Put simply

Think of it as a delivery driver trying to stuff an oversized package into a mailbox โ€” if the box is too full, things start spilling out, and the contents can end up anywhere they shouldn't. In this case, the curTime parameter is the package that gets out of control! The buffer overflow in the D-Link DIR600L arises from improper handling of the curTime parameter in the formAdvNetwork function, allowing attackers to overwrite memory and execute malicious code.

What to do

An attacker could exploit this vulnerability to manipulate the device's memory, potentially leading to unauthorized access or even complete control over the router. This is absolutely devastating for your home or office network, as it opens the door for further attacks on connected devices! To secure your router, patch it immediately to the latest firmware version that resolves this issue. Regularly check for updates and ensure that any unused features are disabled to limit exposure. ๐Ÿ›ก๏ธ You've got this! Follow these steps to protect your network from potential hijinks! ๐Ÿš€

The record
Technical detail
CVSS v3.1
7.5 ยท HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00463 ยท 39.2th percentile
Published
2025-10-24T00:00Z
EPSS history
Timeline
  • 24 OCT 00:00Z
    D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork
    cvelistv5