Lucene search

MitreCVE-2024-46557

HistorySep 18, 2024 - 3:15 p.m.

CVE-2024-46557

2024-09-1815:15:16

CWE-120

mitre

web.nvd.nist.gov

draytek vigor 3910

buffer overflow

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected configurations

Nvd

Node

draytekvigor3910_firmwareMatch4.3.2.6

AND

draytekvigor3910Match-

VendorProductVersionCPE
draytekvigor3910_firmware4.3.2.6cpe:2.3:o:draytek:vigor3910_firmware:4.3.2.6:*:*:*:*:*:*:*
draytekvigor3910-cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
draytek	vigor3910_firmware	4.3.2.6	cpe:2.3:o:draytek:vigor3910_firmware:4.3.2.6:::::::*
draytek	vigor3910	-	cpe:2.3:h:draytek:vigor3910:-:::::::*

References

ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#8817e09b31b04ebebdaa5d6df1415df0

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-46557