This vulnerability exists in the D-Link DIR-513 router firmware version 1.10, specifically in the formSetPassword function located at /goform/formSetPassword. An attacker can remotely send a specially crafted POST request manipulating the curTime parameter, causing a buffer overflow. This condition may allow execution of arbitrary code or denial of service. The product is out of support, and no official fix or patch has been provided by D-Link. The CVSS 4.0 base score is 8.7, reflecting high impact and ease of exploitation without privileges or user interaction.

Successful exploitation of this vulnerability could lead to remote code execution or denial of service on the affected device. Since the router is no longer supported, the vulnerability remains unpatched, increasing the risk for users still operating this device. The public disclosure of an exploit further elevates the threat level. The compromised device could be leveraged to disrupt network operations or as a foothold for further attacks within the network.

No official patch or remediation is available due to the product being out of support. Users are strongly advised to discontinue use of the affected D-Link DIR-513 version 1.10 device or replace it with a supported model. Network-level protections such as firewall rules to restrict access to the device's management interface from untrusted networks may reduce exposure. Monitor for unusual activity related to the device, but note that no vendor-provided fix currently exists.