CVE-2024-46580

CVE-2024-46580 affects DrayTek Vigor 3910, version 4.3.2.6. A buffer overflow in the fid parameter of the v2x00.cgi page can cause a Denial of Service (DoS) with a crafted input. The connected documents provide the same vulnerability description; no explicit exploit details, affected other versio...

PT-2024-32063

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the saveitem parameter at the "lan2lan.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

PT-2024-32051

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the fid parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For Drayt...

PT-2024-32035 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the ipaddrmsk%d parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...

PT-2024-32057

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sCloudPass parameter at the /v2x00.cgi API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

PT-2024-32064

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sAct parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32039 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the sProfileName parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...

CVE-2024-46593: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32060

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sDnsPro parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32058

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sProfileName parameter at the "wizfw.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

PT-2024-32061

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the ssidencrypt 5g%d parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32066

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the iprofileidx parameter at the "dialin.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations...

PT-2024-32041

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sBPA UsrNme parameter at the "inet15.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

PT-2024-32038

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sInRCSecret0 parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations Fo...

PT-2024-32049

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the sPPPSrvNm parameter at the fwuser.cgi endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32047

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the iProfileIdx parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations F...

PT-2024-32033

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sBPA Pwd parameter at the "inet15.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-9703

Name of the Vulnerable Software and Affected Versions DrayTek Vigor version 4.3.2.6 Description The issue is related to a buffer overflow on the stack when handling the sIpv6AiccuUser parameter, which can lead to a Denial of Service DoS when exploited. This can be caused by a crafted input to the...

PT-2024-32053

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow was discovered in the sSrvAddr parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations For...

PT-2024-32055

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the AControlIp1 parameter at the "acontrol.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendation...