A buffer overflow vulnerability in D-Link DIR600L firmware version FW116WWb01 poses a high risk of service disruption to impacted network devices.

This is a buffer overflow vulnerability triggered by sending malicious input to the curTime parameter within the formEasySetTimezone function. The CVSS vector of AV:N/AC:L/PR:N/UI:N indicates that the flaw is remotely exploitable by an unauthenticated attacker.

The successful exploitation of this vulnerability results in a denial of service, rendering the affected network device unresponsive. This can lead to significant operational downtime for users relying on the router for network connectivity. With a CVSS score of 7.5, this issue represents a high-severity risk that demands prompt attention to maintain network availability and stability.

Immediate Action: Contact D-Link support or check the official vendor portal for firmware updates addressing this buffer overflow, as no official patch status is currently confirmed.

Proactive Monitoring: Monitor device logs for repetitive crashes or unexpected reboots of the DIR600L units, which may indicate attempts to trigger the buffer overflow.

Compensating Controls: Restrict access to the router management interface by ensuring it is not exposed to the public internet and by utilizing access control lists to limit administrative access to trusted management subnets.

Public Exploit Available: Yes — a proof-of-concept exists as documented in the referenced GitHub repository.

Given the public availability of technical details and proof-of-concept code, the risk of exploitation is credible. Administrators should prioritize isolating affected DIR600L devices from external networks and monitor vendor communication channels for an official firmware resolution. Immediate mitigation through network segmentation is strongly advised to prevent unauthorized access and potential service disruption.