CVE-2025-60549
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formAutoDetecWAN_wizard4 function. The flaw allows out-of-bounds writes when processing this parameter.
Risk Assessment
Could lead to device crash or remote code execution by an attacker with access to the management interface. Affects routers exposed to network attacks.
Recommendation
Update the firmware to a patched version or restrict access to the administrative interface. If no fix is available, consider retiring the device.
Other vulnerabilities in D-Link DIR600L Ax
See all- CVE-2025-60552High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formTcpipSetup function. The flaw allows out-of-bounds writes when processing this parameter.
- CVE-2025-60550High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formEasySetTimezone function. The flaw allows out-of-bounds writes when processing this parameter.
Original NVD description (English source)
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS