A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 7.4 · dlinkNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
References 5
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvFirewall-33153a41781f80678733f4b12282f3fa?source=copy_link Exploit, Third Party Advisory
- https://vuldb.com/submit/791854 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/356535 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/356535/cti Permissions Required, VDB Entry
- https://www.dlink.com/ Product