This vulnerability exists in the D-Link DIR-513 router firmware version 1.10 within the formSetRoute function of the POST Request Handler component. Specifically, manipulation of the 'curTime' parameter leads to a buffer overflow condition. The vulnerability can be triggered remotely, allowing an attacker to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The product is no longer maintained by D-Link, and no official patch or remediation level has been published.

Successful exploitation of this buffer overflow vulnerability may allow remote attackers to execute arbitrary code or disrupt the normal operation of the affected device. Given the high CVSS score and the availability of a public exploit, affected devices are at significant risk. However, since the product is no longer supported, no vendor-provided fixes or mitigations exist.

No official patch or remediation is currently available as the affected product is no longer supported by the vendor. Users should consider discontinuing use of the vulnerable device or isolating it from untrusted networks to reduce exposure. Monitoring for unusual activity related to this device is advisable. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if any becomes available.