PT-2024-32041

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sBPA UsrNme parameter at the "inet15.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

CVE-2024-46580

CVE-2024-46580 affects DrayTek Vigor 3910, version 4.3.2.6. A buffer overflow in the fid parameter of the v2x00.cgi page can cause a Denial of Service (DoS) with a crafted input. The connected documents provide the same vulnerability description; no explicit exploit details, affected other versio...

CVE-2024-46592

Affected product : DrayTek Vigor 3910 (v4.3.2.6). Vulnerability : buffer overflow in the ssidencrypt_5g%d parameter of the v2x00.cgi page. Impact : Denial of Service (DoS) via crafted input; CVSS 3.1 base score 7.5 (HIGH) with network access and no user interaction required. Root cause : overflow...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the pb parameter of the v2x00.cgi page. An attacker can cause a denial o...

PT-2024-32053

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sSrvAddr parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32039 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the sProfileName parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...

CVE-2024-46556

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sInRCSecret0 parameter of v2x00.cgi, enabling Denial of Service via crafted input. Affected product and exact root cause are stated in multiple sources (CVE-2024-46556; NVD/Red Hat/CNNVD). Exploitation details are not provid...

PT-2024-32047

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the iProfileIdx parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations F...

CVE-2024-46558: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sDnsPro parameter of the v2x00.cgi page. An attacker can cause a...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the iProfileIdx parameter of the v2x00.cgi page. An attacker can cause a...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the newProname parameter of the v2x00.cgi page. An attacker can cause a...

CVE-2024-46557: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the profname parameter of the v2x00.cgi page. An attacker can cause a...

CVE-2024-46553

CVE-2024-46553 affects Draytek Vigor 3910 (version 4.3.2.6). A buffer overflow in the ipaddrmsk%d parameter of the v2x00.cgi endpoint allows a crafted input to trigger a Denial of Service over a network connection. Exploitation details are not provided; information in the PT-2024-32035 advisory o...

PT-2024-32037 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the pb parameter at the "v2x00.cgi" endpoint, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Draytek Vigor 3910...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sProfName parameter of the v2x00.cgi page. An attacker can cause a...

CVE-2024-46557

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32044 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the queryret parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: F...

CVE-2024-46556: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...