This vulnerability exists in the D-Link DIR-605L router firmware version 2.13B01 within the formSetDDNS function of the POST request handler component. An attacker can remotely manipulate the curTime argument to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. The product affected is no longer maintained by D-Link, and no official remediation or patch has been provided. Public disclosure of the exploit exists, but no known active exploitation has been reported.

Successful exploitation of this vulnerability could allow a remote attacker to cause a buffer overflow, which may result in arbitrary code execution or denial of service on the affected device. Given the device is no longer supported, affected users may face ongoing risk without official fixes. There are no confirmed reports of exploitation in the wild at this time.

No official patch or remediation is available as the affected product is no longer supported by the vendor. Users should consider discontinuing use of the vulnerable device or replacing it with a supported model. Network-level protections such as restricting access to the device's management interface from untrusted networks may reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if available.