1281 matches found
CVE-2024-46591
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
DrayTek Vigor 3910 安全漏洞
DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sAct parameter of the v2x00.cgi page. An attacker can cause a denial...
PT-2024-32059 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the ssidencrypt%d parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: Fo...
CVE-2024-46590
CVE-2024-46590 affects DrayTek Vigor 3910, firmware 4.3.2.6, with a buffer overflow in the ssidencrypt%d parameter of the v2x00.cgi endpoint. This leads to a Denial of Service via crafted input. Documents describe the vulnerability consistently across multiple sources, with network-based, low‑com...
CVE-2024-46559
CVE-2024-46559 (DrayTek Vigor 3910) : The DrayTek Vigor 3910, version 4.3.2.6, contains a buffer overflow in the parameter sBPA_UsrNme on the page inet15.cgi . A crafted input can trigger a Denial of Service (DoS) and may cause the device to crash. Connected sources describe the vulnerability con...
DrayTek Vigor 3910 安全漏洞
DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sAppName parameter of the sslapp.cgi page. An attacker can cause a...
DrayTek Vigor 3910 安全漏洞
DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6, which stems from a buffer overflow issue contained in the queryret parameter of the v2x00.cgi page. An attacker can cause a denia...
CVE-2024-46597
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46568
The CVE-2024-46568 entry concerns DrayTek Vigor 3910 devices running v4.3.2.6, where a buffer overflow in the sPeerId parameter of vpn.cgi can be triggered to cause a Denial of Service. The NVD and related records list a CVSSv3.1 base score of 7.5 (Network, Low attack complexity, No privileges, N...
DrayTek Vigor 3910 安全漏洞
The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the sPubKey parameter on the dialin.cgi page that fails to properly validate the length of the input data, and...
CVE-2024-46582
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2024-32035 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the ipaddrmsk%d parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...
CVE-2024-46561
Affected product/variant: DrayTek Vigor 3910, firmware v4.3.2.6. Component/endpoint: vulnerable in the queryret parameter of the v2x00.cgi endpoint. Root cause: buffer overflow in queryret leading to DoS. Impact: Denial of Service via crafted input; CVSS 3.1 base score 7.5 (NETWORK, HIGH impact o...
PT-2024-9707 · Draytek · Draytek Vigor
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor version 4.3.2.6 Description: The issue is related to a buffer overflow in the saveVPNProfile parameter at the "v2x00.cgi" API endpoint. This can be exploited by a remote attacker to cause a Denial of Service DoS via a crafted...
CVE-2024-46555
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2024-32037 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the pb parameter at the "v2x00.cgi" endpoint, allowing attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For Draytek Vigor 3910...
PT-2024-32044 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the queryret parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: F...
CVE-2024-46556
DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sInRCSecret0 parameter of v2x00.cgi, enabling Denial of Service via crafted input. Affected product and exact root cause are stated in multiple sources (CVE-2024-46556; NVD/Red Hat/CNNVD). Exploitation details are not provid...
PT-2024-32036 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the profname parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...
DrayTek Vigor 3910 安全漏洞
DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the saveitem parameter of the lan2lan.cgi page. An attacker can cause a...