This vulnerability exists in the POST request handler function formAdvNetwork of the D-Link DIR-605L router firmware version 2.13B01. By manipulating the curTime argument, an attacker can trigger a buffer overflow condition. The vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service. The product is end-of-life and unsupported, and no official fix or mitigation has been published by the vendor. The CVSS v4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to remote code execution or denial of service on the affected device. Since the device is a network router, compromise could affect network traffic and security. The vulnerability is exploitable remotely without authentication or user interaction, increasing risk. However, the affected product is no longer supported, so no vendor remediation is available.

No official patch or remediation is available as the affected product is no longer supported by D-Link. Users should consider replacing the affected device with a supported model to mitigate risk. Network-level protections such as firewall rules restricting access to the device's management interface may reduce exposure. Monitor for any public exploit code and apply network segmentation if continued use is necessary.