CVE-2014-8361

CVE-2014-8361 affects Realtek SDK’s miniigd UPnP SOAP service. The root cause is improper input validation in the NewInternalClient handling, enabling a remote attacker to execute arbitrary code. The description notes exploitation in the wild through 2023. Related sources indicate this vulnerabil...

CVE-2025-4346

The CVE-2025-4346 entry concerns D-Link DIR-600L devices up to firmware 2.07B01, where the vulnerable component is the function formSetWAN_Wizard534. The issue arises from improper validation of the host argument, causing a buffer overflow that can be triggered remotely. Impact is described as po...

CVE-2025-4342

CVE-2025-4342 refers to a buffer overflow in D-Link DIR-600L’s formEasySetupWizard3 function. The issue arises from improper validation of the host argument, enabling possible remote exploitation on affected devices (up to firmware 2.07B01). The vulnerability affects devices that are no longer ma...

CVE-2025-4350

CVE-2025-4350 : D-Link DIR-600L devices up to firmware 2.07B01 are affected by a remote command-injection in the wake_on_lan function, via manipulation of the host argument. This can lead to arbitrary command execution and occurs on a device family that is no longer maintained. Relevant sources d...

CVE-2025-4343

CVE-2025-4343 affects D-Link DIR-600L devices (up to 2.07B01) due to a vulnerability in the formEasySetupWizard function. The issue is a buffer overflow triggered by manipulating the input parameter host, reported as remotely exploitable on devices no longer supported by the maintainer. The conne...

CVE-2025-4344

CVE-2025-4344 affects D-Link DIR-600L firmware up to 2.07B01. The vulnerability originates in the formLogin function where the host argument is not properly validated, leading to a remote-triggered buffer overflow. Impact described across sources includes arbitrary code execution or denial of ser...

CVE-2025-4345

The CVE-2025-4345 issue affects D-Link DIR-600L devices (firmware up to 2.07B01). The vulnerability resides in the formSetLog function, where the host argument can be manipulated to trigger a buffer overflow. This can lead to remote exploitation and potentially arbitrary code execution or a denia...

CVE-2025-4347

CVE-2025-4347 affects D-Link DIR-600L (firmware up to 2.07B01). The vulnerability is in the formWlSiteSurvey function: input host can cause a buffer overflow, enabling remote exploitation. All documented impact is high (remote, arbitrary code execution/DoS) and affected devices are noted as no lo...

CVE-2025-4348

CVE-2025-4348 affects D-Link DIR-600L firmware up to 2.07B01. The vulnerable component is the function formSetWanL2TP; mishandling of the host argument leads to a buffer overflow. This is described as a remote, unauthenticated attack that could allow arbitrary code execution or cause a denial of ...

CVE-2025-60571

Affected product: D-Link DIR600LAx devices (firmware FW116WWb01). The vulnerability is a buffer overflow in the curTime parameter of the formSetQoS function. Root cause: improper length validation of input data in formSetQoS leading to overflow. Impact: potential denial of service (as described b...

CVE-2025-4349

The CVE-2025-4349 entry concerns D-Link DIR-600L devices. Affects the function formSysCmd, where the host argument can be manipulated to achieve command injection. Exploitation is described as remote and feasible on firmware versions up to 2.07B01, and the vulnerability impacts devices that are n...

CVE-2026-42375

D-Link DIR-600L A1 (End-of-Life) is affected by CVE-2026-42375 due to a hardcoded telnet backdoor. The device runs a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u u...

CVE-2025-60552

CVE-2025-60552 affects the D-Link DIR600L router (DIR600L Ax FW116WWb01). A buffer overflow is triggered in the function formTcpipSetup via the input noted in the curTime parameter, due to improper input length validation. Reported impact is denial of service, with CVSSv3.1 indicating Network acc...

CVE-2025-60553

CVE-2025-60553 describes a buffer overflow in the D-Link DIR600L Ax firmware FW116WWb01, triggered by the curTime parameter in the function formSetWAN_Wizard52. The root cause is improper validation of input length in that function, which can be exploited to execute arbitrary code or cause a deni...

CVE-2025-60565

The CVE-2025-60565 issue affects D-Link DIR600L devices and the DIR600L Ax variant FW116WWb01, where a buffer overflow is triggered in the formSchedule function via the curTime parameter. The root cause is improper input length validation of curTime, enabling a remote attacker to cause a denial o...

CVE-2025-60551

Summary of CVE-2025-60551 Affected product: D-Link DIR600L (Ax variant FW116WWb01).Vulnerability: Buffer overflow in the function formDeviceReboot triggered by the next_page parameter (insufficient input length validation).Impact: As stated across connected sources, can cause denial of service (a...

CVE-2025-60561

The CVE-2025-60561 entry relates to the D-Link DIR600L family (including Ax FW116WWb01) with a buffer overflow in the curTime parameter of the formSetEmail function. The root cause is improper input length validation, enabling a likely denial-of-service impact (as stated in multiple sources) and ...

CVE-2025-60562

This CVE pertains to the D-Link DIR600L family (specifically Ax FW116WWb01) with a buffer overflow in the curTime handling of formWlSiteSurvey. The vulnerability arises from inadequate validation of input length, which can lead to a denial of service. Multiple connected sources (NVD, Red Hat, EUV...

CVE-2025-60548

CVE-2025-60548 concerns a buffer overflow in the D-Link DIR600L series (DIR600L Ax FW116WWb01) triggered by the curTime parameter in the function formLanSetupRouterSettings . The CNVD entry and other sources describe input length validation failures in this parameter, enabling an attacker to pote...

CVE-2026-42374

The CVE affects D-Link DIR-600L Hardware Revision B1 (EOL). A hardcoded telnet backdoor starts a telnet daemon at boot and uses the username "Alphanetworks" with a static password read from /etc/alpha_config/image_sign (wrgn61_dlwbr_dir600L). The custom telnetd accepts -u user:password, and the l...

CVE-2025-60566

CVE-2025-60566 concerns the D-Link DIR600L Ax firmware (FW116WWb01). A buffer overflow in the curTime parameter of the formSetMACFilter function is reported, allowing an attacker to cause denial of service via network access (no user interaction). The incident is documented across multiple source...

CVE-2025-60547

CVE-2025-60547 concerns the D-Link DIR600L/DIR600L Ax FW116WWb01 device, where the curTime parameter in the formSetWAN_Wizard7 function can trigger a buffer overflow. CNVD and CNNVD entries corroborate a buffer overflow leading to a denial of service, with the vulnerability affecting the DIR600L ...

CVE-2025-60554

CVE-2025-60554 affects D-Link DIR600L Ax firmware FW116WWb01. The vulnerability is a buffer overflow in the curTime parameter of the formSetEnableWizard function, caused by insufficient input length validation. Impact is high: potential arbitrary code execution or denial of service, with CVSS 3.1...

CVE-2025-60550

Affected product: D-Link DIR600L (Ax FW116WWb01). Vulnerable component: formEasySetTimezone, via the curTime parameter. Root cause: lack of proper input length validation leading to a buffer overflow. Impact: denial of service (DoS) as described across CNVD/CNNVD/Red Hat/NVD records; exploitation...

CVE-2025-60556

The CVE refers to a buffer overflow in the D-Link DIR600L (and DIR600L Ax) firmware related to the curTime parameter in the formSetWizard1 function of FW116WWb01. Public sources consistently describe a vulnerability triggered by insufficient input validation on curTime, enabling a overflow condit...

CVE-2025-60558

CVE-2025-60558 affects D-Link DIR600L Ax firmware FW116WWb01. The root cause is a buffer overflow in the curTime parameter of the formVirtualServ function, leading to a denial of service. CVSSv3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction; Confidentiali...

CVE-2025-60568

CVE-2025-60568 concerns D-Link DIR600L/DIR600L Ax FW116WWb01 devices, where the curTime parameter in the formAdvFirewall function can trigger a buffer overflow. Multiple connected sources (CNVD, CNNVD, NVD/RH entries) describe this as a buffer overflow leading to denial of service, caused by inad...

CVE-2025-60549

CVE-2025-60549 affects the D-Link DIR600L device (Ax FW116WWb01). A buffer overflow exists in the curTime parameter of the function formAutoDetecWAN_wizard4 . Redundant confirmations from CNVD, RH, CNNVD/PTSecurity references indicate the vulnerability can lead to a denial of service. The connect...

CVE-2025-60570

CVE-2025-60570 affects the D-Link DIR600L family (e.g., DIR600L, DIR600L Ax FW116WWb01). The issue is a buffer overflow in the curTime parameter of the function formLogDnsquery, caused by insufficient input length validation. Reported impact: potential denial of service with high availability imp...

CVE-2025-60557

CVE-2025-60557 affects the D-Link DIR600L Ax firmware FW116WWb01. The vulnerability is a buffer overflow in the curTime parameter of the function formSetEasy_Wizard, caused by improper input length validation. This can lead to a denial of service. Public sources consistently describe an impact on...

CVE-2025-60559

CVE-2025-60559 concerns a buffer overflow in D-Link DIR600L devices (Ax FW116WWb01, and DIR600L family) triggered by the curTime parameter in the function formSetDomainFilter. The root cause is insufficient validation of input data length for curTime, allowing overflow. Documented impact is a den...

CVE-2025-60555

CVE-2025-60555 concerns a buffer overflow in the D-Link DIR600L/DIR600L Ax firmware (FW116WWb01) related to the curTime input in the function formSetWizardSelectMode. The vulnerability arises from insufficient input length validation, allowing an attacker to trigger a crash/denial of service. Aff...

CVE-2025-60564

CVE-2025-60564 concerns D-Link DIR600L family (DIR600L Ax FW116WWb01). A buffer overflow is caused by the curTime parameter in the formSetLog function due to improper input length validation. Public details in connected sources describe impact as denial of service, with no explicit mention of a p...

CVE-2025-60563

D-Link DIR600L Ax router firmware FW116WWb01 is affected by a buffer overflow in the formSetPortTr function triggered by the curTime parameter due to insufficient input length validation. This vulnerability can lead to denial of service. Public details on a fixed version are not provided in the s...

CVE-2025-60569

CVE-2025-60569 affects D-Link DIR600L (Ax FW116WWb01) where the curTime parameter in the formSetRoute function can overflow a input buffer. CNVD and CNNVD describe a buffer overflow leading to a denial of service; Red Hat and NVD entries reiterate the same description. No vendor-specific patch/ve...

CVE-2025-60572

CVE-2025-60572 describes a buffer overflow in D-Link DIR600L’s formAdvNetwork curTime handling (Ax FW116WWb01), leading to a denial of service. Affected device: DIR600L, firmware Ax FW116WWb01; vulnerable component: curTime parameter parsing in formAdvNetwork. CVSS v3.1 base score 7.5 (Network, L...