This vulnerability involves a buffer overflow in the formAdvFirewall function of the D-Link DIR-605L router firmware version 2.13B01. Specifically, manipulation of the curTime argument in the POST request handler leads to memory corruption. The flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The product is end-of-life and unsupported, and no official fix or patch has been provided by D-Link. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or disrupt the device's normal operation, potentially leading to denial of service or compromise of the router. Since the device is no longer supported, affected users remain exposed without vendor-provided remediation. No confirmed exploitation in the wild has been reported.

No official patch or remediation is available as the affected product is no longer supported by the vendor. Users should consider replacing the vulnerable D-Link DIR-605L device with a supported model that receives security updates. Network-level protections such as firewall rules restricting access to the device's management interface from untrusted networks may reduce exposure.