This vulnerability involves a buffer overflow in the formAdvFirewall function of the D-Link DIR-605L router firmware version 2.13B01. The flaw arises from improper handling of the curTime argument in the /goform/formAdvFirewall POST request handler, allowing an attacker to remotely trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The product affected is no longer maintained by D-Link, and no official fix or patch has been published.

Successful exploitation of this buffer overflow could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score and the nature of the vulnerability, the impact includes potential full compromise of the router's functionality and security. Since the device is no longer supported, affected users remain exposed to this risk without vendor-provided remediation.

No official patch or remediation is available as the affected product is no longer supported by D-Link. Users are advised to discontinue use of the vulnerable firmware version 2.13B01 on DIR-605L devices. Where possible, replace the affected hardware with a supported model or implement network-level protections such as firewall rules to restrict access to the device's management interface from untrusted networks.