CVE-2024-46550

DrayTek Vigor 3910 (firmware v4.3.2.6) is affected by CVE-2024-46550 due to a buffer overflow in the CGIbyFieldName parameter of chglog.cgi, which can be exploited to cause a Denial of Service. The connected sources consistently describe this vulnerability as enabling DoS via crafted input, with ...

CVE-2024-46561

Affected product/variant: DrayTek Vigor 3910, firmware v4.3.2.6. Component/endpoint: vulnerable in the queryret parameter of the v2x00.cgi endpoint. Root cause: buffer overflow in queryret leading to DoS. Impact: Denial of Service via crafted input; CVSS 3.1 base score 7.5 (NETWORK, HIGH impact o...

CVE-2024-46553

CVE-2024-46553 affects Draytek Vigor 3910 (version 4.3.2.6). A buffer overflow in the ipaddrmsk%d parameter of the v2x00.cgi endpoint allows a crafted input to trigger a Denial of Service over a network connection. Exploitation details are not provided; information in the PT-2024-32035 advisory o...

CVE-2024-46554

CVE-2024-46554 affects DrayTek Vigor 3910 (v4.3.2.6) with a buffer overflow in the profname parameter of the v2x00.cgi endpoint, enabling Denial of Service via crafted input. The root cause is a vulnerability in handling profname that can overflow memory. Affected product/version explicitly ident...

CVE-2024-46597

The CVE covers the DrayTek Vigor 3910, affected by a buffer overflow in the sPubKey parameter of dialin.cgi on firmware v4.3.2.6. The root cause is improper input length validation for sPubKey, enabling a crafted input to cause a Denial of Service. No exploitation details or mitigations are provi...

CVE-2024-46594

The CVE-2024-46594 entry concerns DrayTek Vigor 3910 firmware v4.3.2.6, where a buffer overflow exists in the saveVPNProfile parameter of v2x00.cgi. This is described as allowing a Denial of Service via crafted input. Documents confirm the affected component is the v2x00.cgi endpoint and that the...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

CVE-2024-46557

DrayTek Vigor 3910 (v4.3.2.6) is affected by CVE-2024-46557 due to a buffer overflow in the sProfileName parameter of the v2x00.cgi endpoint, causing Denial of Service via crafted input. Affected component: the v2x00.cgi handler, specifically the sProfileName field. Impact per sources: DoS with n...

CVE-2024-46592

Affected product : DrayTek Vigor 3910 (v4.3.2.6). Vulnerability : buffer overflow in the ssidencrypt_5g%d parameter of the v2x00.cgi page. Impact : Denial of Service (DoS) via crafted input; CVSS 3.1 base score 7.5 (HIGH) with network access and no user interaction required. Root cause : overflow...

CVE-2024-46551

CVE-2024-46551 affects DrayTek Vigor 3910 (v4.3.2.6). The vulnerability is a buffer overflow in the sBPA_Pwd parameter in the inet15.cgi page, which can be triggered by crafted input and leads to a Denial of Service. Multiple sources confirm the root cause and affected component, but none provide...

CVE-2024-46555

Summary: CVE-2024-46555 affects DrayTek Vigor 3910, specifically firmware version 4.3.2.6, where a buffer overflow in the pb parameter of the v2x00.cgi endpoint can cause a Denial of Service. The root cause is a vulnerability in handling the pb parameter, enabling crafted input to disrupt availab...

CVE-2024-46568

The CVE-2024-46568 entry concerns DrayTek Vigor 3910 devices running v4.3.2.6, where a buffer overflow in the sPeerId parameter of vpn.cgi can be triggered to cause a Denial of Service. The NVD and related records list a CVSSv3.1 base score of 7.5 (Network, Low attack complexity, No privileges, N...

CVE-2024-46590

CVE-2024-46590 affects DrayTek Vigor 3910, firmware 4.3.2.6, with a buffer overflow in the ssidencrypt%d parameter of the v2x00.cgi endpoint. This leads to a Denial of Service via crafted input. Documents describe the vulnerability consistently across multiple sources, with network-based, low‑com...

CVE-2024-46591

CVE-2024-46591 affects DrayTek Vigor 3910 running version 4.3.2.6. The issue is a buffer overflow in the sDnsPro parameter handled by v2x00.cgi, enabling a crafted input to cause a Denial of Service. The available documents do not provide exploitation details, affected attack methods, or the curr...

CVE-2024-46565

DrayTek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the sSrvName parameter of the service.cgi endpoint, enabling Denial of Service via crafted input. The vulnerability is documented across multiple sources with no explicit patch version provided. Mitigation guidance varies: s...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46595

The vulnerability CVE-2024-46595 affects DrayTek Vigor 3910 (version 4.3.2.6). A buffer overflow in the saveitem parameter of the lan2lan.cgi page can be triggered by crafted input to cause a Denial of Service. The connected sources confirm the affected product and the impact; no remediation or p...

CVE-2024-46571

CVE-2024-46571 affects DrayTek Vigor 3910 (fwuser.cgi) where a buffer overflow in the sPPPSrvNm parameter can be triggered by crafted input, leading to a Denial of Service (DoS) and availability impact. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (HIGH) with network attack ...

CVE-2024-46582

CVE-2024-46582 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The vulnerability is a buffer overflow in the sSrvAddr parameter of v2x00.cgi, enabling a Denial of Service via crafted input. Root cause and vendor-page details are corroborated by Red Hat and NVD family entries, CNNVD, and CVE recor...

CVE-2024-46584

CVE-2024-46584 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The issue is a buffer overflow in the AControlIp1 parameter on the acontrol.cgi page, caused by insufficient input length validation, which can be exploited to cause a Denial of Service. Multiple sources concur on the affected product...