This vulnerability affects the D-Link DIR-605L router version 2.13B01. The issue is a buffer overflow in the formVirtualServ function within the POST Request Handler component, triggered by manipulation of the curTime argument. The vulnerability can be exploited remotely without user interaction or privileges. The product is no longer supported, and no official fix or patch is available. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to a buffer overflow condition, potentially allowing remote attackers to execute arbitrary code or cause denial of service on the affected device. Given the high CVSS score and the nature of the vulnerability, the impact on confidentiality, integrity, and availability is high. However, the affected product is no longer supported, and no active exploitation in the wild has been reported.

No official patch or remediation is available from the vendor as the affected product is no longer supported. Users should consider discontinuing use of the affected device or isolating it from untrusted networks to mitigate risk. Patch status is not yet confirmed — check the vendor advisory or official D-Link communications for any updates or alternative mitigations.