CVE-2025-60554
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
D-Link DIR600L Ax FW116WWb01 contains a buffer overflow via the curTime parameter in the formSetEnableWizard function. This vulnerability could be exploited by an attacker to destabilize the device or potentially execute code.
Risk Assessment
A buffer overflow in the router's management interface may allow an attacker to cause a denial of service or, under favorable conditions, execute arbitrary code.
Recommendation
Update the D-Link DIR600L Ax firmware to the latest version provided by the vendor; if update is not possible, restrict access to the administrative interface.
Other vulnerabilities in D-Link DIR600L Ax
See all- CVE-2025-60548Critical
D-Link DIR600L Ax FW116WWb01 contains a buffer overflow via the curTime parameter in the formLanSetupRouterSettings function. This vulnerability could be exploited by an attacker to destabilize the device or potentially execute code.
- CVE-2025-60565High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSchedule function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60564High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSetLog function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60563High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSetPortTr function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60562High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formWlSiteSurvey function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60561High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetEmail function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60559High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetDomainFilter function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60558High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formVirtualServ function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60557High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetEasy_Wizard function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60556High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetWizard1 function. The flaw may be exploited by a remote attacker to destabilize the device.
Original NVD description (English source)
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS