CVE-2024-46598

CVE-2024-46598 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the iprofileidx parameter of dialin.cgi allows remote attackers to cause a Denial of Service via a crafted input. The issue is accessible over the network (vector: NETWORK) with low attack complexity and no user interactio...

CVE-2024-46550

DrayTek Vigor 3910 (firmware v4.3.2.6) is affected by CVE-2024-46550 due to a buffer overflow in the CGIbyFieldName parameter of chglog.cgi, which can be exploited to cause a Denial of Service. The connected sources consistently describe this vulnerability as enabling DoS via crafted input, with ...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

CVE-2024-46551

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46561

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46593

CVE-2024-46593 concerns the DrayTek Vigor 3910, affected hardware and firmware: v4.3.2.6. The vulnerability is a buffer overflow in the trapcomm parameter of the cgiswm.cgi page, leading to a Denial of Service when processed input is crafted. The available connected documents consistently describ...

CVE-2024-46553

CVE-2024-46553 affects Draytek Vigor 3910 (version 4.3.2.6). A buffer overflow in the ipaddrmsk%d parameter of the v2x00.cgi endpoint allows a crafted input to trigger a Denial of Service over a network connection. Exploitation details are not provided; information in the PT-2024-32035 advisory o...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sPeerId parameter of the vpn.cgi page. An attacker can cause a denia...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the ssidencrypt5g%d parameter of the v2x00.cgi page. An attacker could...

CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the pb parameter of the v2x00.cgi page. An attacker can cause a denial o...

PT-2024-9702 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: The issue is related to a buffer overflow in the sAppName parameter at the "sslapp.cgi" endpoint. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability ca...

CVE-2024-46568

The CVE-2024-46568 entry concerns DrayTek Vigor 3910 devices running v4.3.2.6, where a buffer overflow in the sPeerId parameter of vpn.cgi can be triggered to cause a Denial of Service. The NVD and related records list a CVSSv3.1 base score of 7.5 (Network, Low attack complexity, No privileges, N...

CVE-2024-46582

CVE-2024-46582 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The vulnerability is a buffer overflow in the sSrvAddr parameter of v2x00.cgi, enabling a Denial of Service via crafted input. Root cause and vendor-page details are corroborated by Red Hat and NVD family entries, CNNVD, and CVE recor...

CVE-2024-46566

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46588

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6, which stems from a buffer overflow issue contained in the queryret parameter of the v2x00.cgi page. An attacker can cause a denia...