This vulnerability involves a buffer overflow in the formSetLog function of the D-Link DIR-605L router firmware 2.13B01. The issue arises from improper processing of the curTime argument in the POST Request Handler, allowing remote attackers to cause a buffer overflow. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability. The product affected is no longer maintained by D-Link, and no official remediation or patch is available.

Successful exploitation of this vulnerability can lead to a buffer overflow, potentially allowing remote attackers to execute arbitrary code or cause denial of service on the affected device. The high CVSS score reflects significant impact on confidentiality, integrity, and availability. However, the lack of vendor support and absence of an official patch means the device remains vulnerable if still in use.

No official patch or remediation is available from the vendor as the affected product is no longer supported. Users are advised to discontinue use of the vulnerable firmware and replace affected devices with supported models. Network-level protections such as firewall rules to restrict access to the device's management interface may reduce exposure. Monitor for any unusual activity related to this device. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if available.