PT-2024-32046 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the sSrvName parameter at the "service.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations:...

CVE-2024-46554

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46589

CVE-2024-46589 affects Draytek Vigor 3910 (v4.3.2.6). The issue is a buffer overflow in the sIpv6AiccuUser parameter on the inetipv6.cgi page, leading to a Denial of Service under crafted input. Documented in multiple sources (NVD/Red Hat/NVD mirror entries) with a CVSS v3.1 impact of 7.5 (Availa...

PT-2024-32065

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sPubKey parameter at the "dialin.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the iprofileidx parameter on the dialin.cgi page that fails to properly validate the length of the input data,...

PT-2024-32034

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sStRtMskShow parameter at the "ipstrt.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46567

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sAct parameter of the v2x00.cgi page. An attacker can cause a denial...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

CVE-2024-46550

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46593

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46555

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46589

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32033

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sBPA Pwd parameter at the "inet15.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

CVE-2024-46554

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46583

CVE-2024-46583 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the extRadSrv2 parameter of the cgiapp.cgi endpoint allows remote attackers to cause a Denial of Service with a crafted input. All sources in connected documents describe this vulnerability and its impact; no patch/version...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the sBPAPwd parameter in the inet15.cgi page that fails to correctly validate the length of the input data, an...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sInRCSecret0 parameter of the v2x00.cgi page. An attacker can cause ...

CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...