CVE-2026-5983: D-Link DIR-605L POST Request formSetDDNS buffer overflow
A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Request Handler. Executing a manipulation of the argument curTime can lead to buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5983?
CVE-2026-5983 is classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-5983?
To mitigate CVE-2026-5983, update the D-Link DIR-605L firmware to the latest version provided by D-Link.
What are the impacts of CVE-2026-5983?
CVE-2026-5983 can allow an attacker to exploit a buffer overflow, potentially leading to denial of service or unauthorized access.
Which devices are affected by CVE-2026-5983?
The D-Link DIR-605L with firmware version 2.13B01 is specifically affected by CVE-2026-5983.
How does CVE-2026-5983 exploit the D-Link DIR-605L?
CVE-2026-5983 exploits the formSetDDNS function within a POST request that manipulates the curTime argument, triggering a buffer overflow.