This vulnerability involves a buffer overflow in the formVirtualServ function of the D-Link DIR-605L router firmware 2.13B01. Specifically, the POST Request Handler improperly processes the curTime argument, allowing remote attackers to trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The product affected is no longer supported, and no official remediation or patch has been published by the vendor.

Successful exploitation of this vulnerability could allow remote attackers to cause a buffer overflow, potentially leading to denial of service or arbitrary code execution on the affected device. Given the high CVSS score and the remote attack vector, the impact on affected devices is significant. However, since the product is no longer supported and no patch is available, affected devices remain vulnerable if exposed to untrusted networks.

No official patch or remediation is available because the affected product is no longer supported by the vendor. Users should consider discontinuing use of the vulnerable firmware version and replacing affected devices with supported models. Network-level mitigations such as restricting access to the device's management interface from untrusted networks may reduce exposure. Monitor vendor advisories for any updates, but currently, patch status is not confirmed and no official fix exists.