ID
VAR-202510-2146
CVE
CVE-2025-60553
TITLE
D-Link DIR600L formSetWAN_Wizard52 function buffer overflow vulnerability
Trust: 0.6
DESCRIPTION
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52. The D-Link DIR600L is a wireless router designed for home users, belonging to D-Link's "Cloud Router" series. It features an external antenna design, supports the 802.11n standard, and has a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L contains a buffer overflow vulnerability. This vulnerability stems from the fact that the `curTime` parameter in the `formSetWAN_Wizard52` function fails to properly validate the length of the input data. Attackers could exploit this vulnerability to execute arbitrary code or cause a denial-of-service attack
Trust: 1.44
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | dir-600l | scope: | eq | version: | 1.16wwb01 | Trust: 1.0 |
| vendor: | d link | model: | dir600l ax fw116wwb01 | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-60553 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2025-26937 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/luckysmallbird/dlink-dir600lax-vulnerability/blob/main/03-buffer%20overflow-formsetwan_wizard52.md | Trust: 1.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-26937 |
| db: | NVD | id: | CVE-2025-60553 |
LAST UPDATE DATE
2025-11-19T23:10:03.010000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-26937 | date: | 2025-11-05T00:00:00 |
| db: | NVD | id: | CVE-2025-60553 | date: | 2025-10-28T02:31:39.963 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-26937 | date: | 2025-11-04T00:00:00 |
| db: | NVD | id: | CVE-2025-60553 | date: | 2025-10-24T16:20:07.420 |