CVE-2025-60565
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSchedule function. The vulnerability may lead to denial of service or potentially other impact depending on context.
Risk Assessment
An attacker can cause instability or unavailability of the router. This may disrupt network access for users relying on the device.
Recommendation
Update D-Link DIR600L Ax firmware to a version containing the fix or restrict management interface access. If no fix is available, consider replacing the device.
Other vulnerabilities in D-Link DIR600L Ax
See all- CVE-2025-60554Critical
D-Link DIR600L Ax FW116WWb01 contains a buffer overflow via the curTime parameter in the formSetEnableWizard function. This vulnerability could be exploited by an attacker to destabilize the device or potentially execute code.
- CVE-2025-60548Critical
D-Link DIR600L Ax FW116WWb01 contains a buffer overflow via the curTime parameter in the formLanSetupRouterSettings function. This vulnerability could be exploited by an attacker to destabilize the device or potentially execute code.
- CVE-2025-60564High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSetLog function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60563High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formSetPortTr function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60562High
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the formWlSiteSurvey function. The vulnerability may lead to denial of service or potentially other impact depending on context.
- CVE-2025-60561High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetEmail function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60559High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetDomainFilter function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60558High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formVirtualServ function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60557High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetEasy_Wizard function. The flaw may be exploited by a remote attacker to destabilize the device.
- CVE-2025-60556High
D-Link DIR600L Ax firmware FW116WWb01 contains a buffer overflow triggered via the curTime parameter in the formSetWizard1 function. The flaw may be exploited by a remote attacker to destabilize the device.
Original NVD description (English source)
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

