Which versions of D-Link are affected by CVE-2026-5983?

CVE-2026-5983 is a buffer overflow vulnerability in end-of-life D-Link DIR-605L routers (firmware 2.13B01) that allows authenticated attackers with network access to execute arbitrary code and…

How to fix or mitigate CVE-2026-5983?

Within 24 hours: Inventory all D-Link DIR-605L routers in production and flag as critical risk. Within 7 days: Isolate affected devices to a segregated management network or plan immediate replacement with current-generation equipment; if isolation is infeasible, disable remote management features and restrict network access via firewall rules. Within 30 days: Complete replacement of all DIR-605L units with vendor-supported alternatives; document remediation status for compliance audits.

D-Link CVE-2026-5983

Q: What is the CVSS score of CVE-2026-5983?

CVE-2026-5983 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21222 HIGH

Buffer Overflow (CWE-119)

2026-04-09 cna@vuldb.com

GHSA-3vj3-fr37-rf37

D-Link Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 09, 2026 - 22:22 euvd

EUVD-2026-21222

Analysis Generated

Apr 09, 2026 - 22:22 vuln.today

CVE Published

Apr 09, 2026 - 22:16 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Request Handler. Executing a manipulation of the argument curTime can lead to buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Buffer overflow in D-Link DIR-605L 2.13B01 router enables remote code execution via POST request manipulation of curTime parameter in formSetDDNS function. Publicly available exploit code exists. Affected device is end-of-life with no vendor support. Authenticated attacker with low-privilege network access can achieve complete system compromise (high confidentiality, integrity, availability impact per CVSS 4.0 scoring).

Technical ContextAI

CWE-119 memory corruption in /goform/formSetDDNS POST handler. Improper validation of curTime argument causes stack/heap buffer overflow. CVSS vector PR:L indicates authentication required. CPE: cpe:2.3:o:dlink:dir-605l_firmware:2.13b01. Exploitation proof-of-concept published via Notion documentation and VulDB CTI feed.

RemediationAI

No vendor-released patch identified at time of analysis; D-Link DIR-605L 2.13B01 is end-of-life and unsupported per manufacturer lifecycle policy (https://www.dlink.com/). Primary recommendation: immediately retire and replace device with currently supported hardware from vendor's active product line. Interim risk reduction: disable remote administration interfaces, restrict network access to formSetDDNS endpoint via firewall ACLs permitting only trusted management IP ranges, implement network segmentation isolating device from critical assets. Monitor D-Link security advisories at https://www.dlink.com/ and VulDB tracking page https://vuldb.com/vuln/356537 for any future guidance. Device replacement is the only sustainable long-term remediation given EOL status.