CVE-2024-46592

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32037 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the pb parameter at the "v2x00.cgi" endpoint, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Draytek Vigor 3910...

CVE-2024-46594

The CVE-2024-46594 entry concerns DrayTek Vigor 3910 firmware v4.3.2.6, where a buffer overflow exists in the saveVPNProfile parameter of v2x00.cgi. This is described as allowing a Denial of Service via crafted input. Documents confirm the affected component is the v2x00.cgi endpoint and that the...

VulnCheck KEV: CVE-2023-24229

DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2024-32044 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the queryret parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: F...

PT-2024-32056 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the sProfileName parameter at the "usergrp.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: F...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sAct parameter of the v2x00.cgi page. An attacker can cause a denial...

CVE-2024-46592

Affected product : DrayTek Vigor 3910 (v4.3.2.6). Vulnerability : buffer overflow in the ssidencrypt_5g%d parameter of the v2x00.cgi page. Impact : Denial of Service (DoS) via crafted input; CVSS 3.1 base score 7.5 (HIGH) with network access and no user interaction required. Root cause : overflow...

PT-2024-32045 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the sProfileName parameter at the "fextobj.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sCloudPass parameter of the v2x00.cgi page. An attacker can cause a...

CVE-2024-46557

DrayTek Vigor 3910 (v4.3.2.6) is affected by CVE-2024-46557 due to a buffer overflow in the sProfileName parameter of the v2x00.cgi endpoint, causing Denial of Service via crafted input. Affected component: the v2x00.cgi handler, specifically the sProfileName field. Impact per sources: DoS with n...

CVE-2024-46555

Summary: CVE-2024-46555 affects DrayTek Vigor 3910, specifically firmware version 4.3.2.6, where a buffer overflow in the pb parameter of the v2x00.cgi endpoint can cause a Denial of Service. The root cause is a vulnerability in handling the pb parameter, enabling crafted input to disrupt availab...

CVE-2024-46597

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46589

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46554

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46556

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46590

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which stems from the extRadSrv2 parameter on the cgiapp.cgi page that fails to correctly validate the length of the input data, and...

CVE-2024-46559

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAUsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...