DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the saveVPNProfile parameter of the v2x00.cgi page. An attacker can caus...

CVE-2024-46557: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

PT-2024-32053

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sSrvAddr parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32052

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sProfName parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

PT-2024-32047

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the iProfileIdx parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations F...

PT-2024-32041

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sBPA UsrNme parameter at the "inet15.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

PT-2024-32033

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sBPA Pwd parameter at the "inet15.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32038

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sInRCSecret0 parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

PT-2024-32057

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sCloudPass parameter at the /v2x00.cgi API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

PT-2024-32060

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sDnsPro parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

CVE-2024-46555

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46551

CVE-2024-46551 affects DrayTek Vigor 3910 (v4.3.2.6). The vulnerability is a buffer overflow in the sBPA_Pwd parameter in the inet15.cgi page, which can be triggered by crafted input and leads to a Denial of Service. Multiple sources confirm the root cause and affected component, but none provide...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the ipaddrmsk%d parameter of the v2x00.cgi page. An attacker could cause...

CVE-2024-46581: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sProfName parameter of the v2x00.cgi page. An attacker can cause a...

PT-2024-32051

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the fid parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For Drayt...

PT-2024-9703

Name of the Vulnerable Software and Affected Versions DrayTek Vigor version 4.3.2.6 Description The issue is related to a buffer overflow on the stack when handling the sIpv6AiccuUser parameter, which can lead to a Denial of Service DoS when exploited. This can be caused by a crafted input to the...

ROS-20240918-01

A vulnerability in the CGI::Cookie.parse function of the Ruby programming language is related to incorrect processing of security prefixes in cookie names. security prefixes in cookie names. Exploitation of the vulnerability allows an attacker, acting remotely, to affect data integrity...

CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can...