This vulnerability involves a buffer overflow in the formSetMACFilter function of the D-Link DIR-605L router firmware version 2.13B01. The issue arises from improper handling of the curTime argument in a POST request, allowing remote attackers to trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The product affected is no longer maintained by D-Link, and no official fix or patch has been provided.

Successful exploitation of this buffer overflow could allow a remote attacker to execute arbitrary code or cause denial of service on the affected device. Given the high CVSS score and the nature of the vulnerability, it poses a significant risk to the confidentiality, integrity, and availability of the router. However, the lack of vendor support and absence of an official patch increases the risk for users who continue to operate this device version.

No official patch or remediation is currently available for this vulnerability as the affected product is no longer supported by the vendor. Users are advised to discontinue use of the vulnerable firmware version 2.13B01 on the D-Link DIR-605L device. Where possible, upgrade to a newer, supported device or firmware version that is not affected by this issue. Network-level protections such as firewall rules to restrict access to the device's management interface may reduce exposure but do not fully mitigate the vulnerability.