Buffer Overflow Vulnerability in D-Link DIR600LAx Firmware
CVE-2025-60571

7.5HIGH

Key Information:

Vendor

D-Link
Status
DIR600LAx
Vendor
CVE Published:
24 October 2025

What is CVE-2025-60571?

The D-Link DIR600LAx firmware version FW116WWb01 has been identified to contain a buffer overflow vulnerability. This issue arises from improper handling of the curTime parameter in the formSetQoS function. An attacker exploiting this vulnerability could potentially execute arbitrary code by crafting malicious input, leading to unauthorized access and control of the affected system. It is crucial for users of this firmware to assess their security measures and apply necessary patches promptly.

References

https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnera...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.