Lucene search

MitreCVE-2024-46568

HistorySep 18, 2024 - 3:15 p.m.

CVE-2024-46568

2024-09-1815:15:17

CWE-120

mitre

web.nvd.nist.gov

draytek vigor

buffer overflow

speerid

vpn.cgi

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected configurations

Nvd

Node

draytekvigor3910_firmwareMatch4.3.2.6

AND

draytekvigor3910Match-

VendorProductVersionCPE
draytekvigor3910_firmware4.3.2.6cpe:2.3:o:draytek:vigor3910_firmware:4.3.2.6:*:*:*:*:*:*:*
draytekvigor3910-cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
draytek	vigor3910_firmware	4.3.2.6	cpe:2.3:o:draytek:vigor3910_firmware:4.3.2.6:::::::*
draytek	vigor3910	-	cpe:2.3:h:draytek:vigor3910:-:::::::*

References

ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#41a3e5586f424ceb858a5a66836a40cb

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-46568