A stack‑based buffer overflow exists in D‑Link DIR‑619L 2.06B01 within the boa component’s formSchedule function. Manipulating the curTime argument can overwrite the stack, allowing an attacker to execute arbitrary code. The vulnerability directly leads to remote code execution and is classified under CWE-119 and CWE-121.

The flaw affects the D‑Link DIR‑619L product running firmware version 2.06B01. No other vendors or product lines are listed, and the affected model is no longer supported by the manufacturer.

The CVSS score of 8.7 indicates a high severity. Although the EPSS score is below 1 %, the publicly available exploit and the remote nature of the attack mean that a compromised device could be leveraged by adversaries. Because the device is unsupported, no official patch exists and the vulnerability remains exploitable. The risk is elevated for any network in which the device remains accessible from the internet or an untrusted zone.