CVE-2024-46553

CVE-2024-46553 affects Draytek Vigor 3910 (version 4.3.2.6). A buffer overflow in the ipaddrmsk%d parameter of the v2x00.cgi endpoint allows a crafted input to trigger a Denial of Service over a network connection. Exploitation details are not provided; information in the PT-2024-32035 advisory o...

CVE-2024-46597

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the iProfileIdx parameter of the v2x00.cgi page. An attacker can cause a...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sProfileName parameter of the v2x00.cgi page. An attacker can cause ...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sPeerId parameter of the vpn.cgi page. An attacker can cause a denia...

CVE-2024-46580

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46551

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46590

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46571

CVE-2024-46571 affects DrayTek Vigor 3910 (fwuser.cgi) where a buffer overflow in the sPPPSrvNm parameter can be triggered by crafted input, leading to a Denial of Service (DoS) and availability impact. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (HIGH) with network attack ...

CVE-2024-46580

CVE-2024-46580 affects DrayTek Vigor 3910, version 4.3.2.6. A buffer overflow in the fid parameter of the v2x00.cgi page can cause a Denial of Service (DoS) with a crafted input. The connected documents provide the same vulnerability description; no explicit exploit details, affected other versio...

CVE-2024-46591

CVE-2024-46591 affects DrayTek Vigor 3910 running version 4.3.2.6. The issue is a buffer overflow in the sDnsPro parameter handled by v2x00.cgi, enabling a crafted input to cause a Denial of Service. The available documents do not provide exploitation details, affected attack methods, or the curr...

CVE-2024-46564

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32046 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the sSrvName parameter at the "service.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations:...

CVE-2024-46551

CVE-2024-46551 affects DrayTek Vigor 3910 (v4.3.2.6). The vulnerability is a buffer overflow in the sBPA_Pwd parameter in the inet15.cgi page, which can be triggered by crafted input and leads to a Denial of Service. Multiple sources confirm the root cause and affected component, but none provide...

CVE-2024-46586

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46586

Draytek Vigor 3910 v4.3.2.6 is affected by CVE-2024-46586 due to a buffer overflow in the sCloudPass parameter of the v2x00.cgi page. Exploitation leads to a Denial of Service (DoS) via a crafted input. Documented impact follows the CVSS vector: Network access, Low attack complexity, No privilege...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

CVE-2024-46598

CVE-2024-46598 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the iprofileidx parameter of dialin.cgi allows remote attackers to cause a Denial of Service via a crafted input. The issue is accessible over the network (vector: NETWORK) with low attack complexity and no user interactio...