D-Link DIR-605L Buffer Overflow Vulnerability in formAdvFirewall POST Request Handler

A buffer overflow vulnerability has been identified in the D-Link DIR-605L router running firmware version 2.13B01. The issue arises in the formAdvFirewall function within the POST Request Handler component. The vulnerability is triggered by manipulating the curTime parameter, which is not properly validated before being processed, allowing for remote exploitation. This vulnerability affects devices that are no longer supported by D-Link.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.