This vulnerability involves a buffer overflow in the formSetRoute function of the D-Link DIR-513 router firmware version 1.10. Specifically, the POST request handler improperly processes the curTime argument, allowing an attacker to overflow a buffer remotely. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability is publicly known and exploitable, but the product is no longer maintained by D-Link, and no official fix or mitigation has been published.

Successful exploitation can lead to a buffer overflow condition, potentially allowing remote code execution or denial of service on the affected device. Given the high CVSS score and remote attack vector, this poses a significant risk to the confidentiality, integrity, and availability of the device. Since the product is no longer supported, affected devices remain vulnerable without vendor-provided patches.

No official patch or remediation is available because the affected product is no longer supported by the vendor. Users should consider discontinuing use of the D-Link DIR-513 version 1.10 or isolating the device from untrusted networks to reduce exposure. Monitor for any third-party or community-provided mitigations, but verify their reliability before deployment. Patch status is not yet confirmed by the vendor; check for any future advisories.