CVE-2025-60558
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formVirtualServ function. The flaw may be exploited by a remote attacker to destabilize the device.
Risk Assessment
The buffer overflow could lead to router crash or compromise, threatening network availability and data security.
Recommendation
Update the router firmware to the latest version or restrict administrative interface access to trusted networks only.
Other vulnerabilities in D-Link DIR600L Ax
See all- CVE-2025-60554Critical
D-Link DIR600L Ax FW116WWb01 contains a buffer overflow via the curTime parameter in the formSetEnableWizard function. This vulnerability could be exploited by an attacker to destabilize the device or potentially execute code.
- CVE-2025-60548Critical
D-Link DIR600L Ax FW116WWb01 contains a buffer overflow via the curTime parameter in the formLanSetupRouterSettings function. This vulnerability could be exploited by an attacker to destabilize the device or potentially execute code.
- CVE-2025-60565High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSchedule function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60564High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSetLog function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60563High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSetPortTr function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60562High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formWlSiteSurvey function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60561High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetEmail function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60559High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetDomainFilter function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60557High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetEasy_Wizard function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60556High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetWizard1 function. The flaw may be exploited by a remote attacker to destabilize the device.
Original NVD description (English source)
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS