719 matches found
CVE-2024-46561: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46551: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46567
Summary of CVE-2024-46567 : Affects DrayTek Vigor 3910 (version v4.3.2.6). A buffer overflow in the iProfileIdx parameter of the page v2x00.cgi can trigger a DoS with crafted input. The CVSS base score is 7.5 (High) with network access, no privileges required, no user interaction. No exploitation...
CVE-2024-46580: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46553: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46559: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAUsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46588
CVE-2024-46588 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The issue is a buffer overflow in the sProfileName parameter of wizfw.cgi, leading to Denial of Service via crafted input. Exploitation details are not provided in the connected documents; no remediation or workaround is stated in the...
CVE-2024-46551
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46588
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2024-9696
Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description The issue is related to a buffer overflow in the sPeerId parameter at the "vpn.cgi" API endpoint. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability can ...
PT-2024-9708
Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description The issue is related to a buffer overflow in the CGIbyFieldName parameter at the chglog.cgi endpoint. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability...
PT-2024-32043 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the pub key parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: Fo...
PT-2024-32059 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the ssidencrypt%d parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: Fo...
PT-2024-32040 · Draytek · Draytek Vigor 3910
Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the newProname parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...
CVE-2024-46598
CVE-2024-46598 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the iprofileidx parameter of dialin.cgi allows remote attackers to cause a Denial of Service via a crafted input. The issue is accessible over the network (vector: NETWORK) with low attack complexity and no user interactio...
CVE-2024-46560
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46590
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46598
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46556
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...