PT-2024-32043 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the pub key parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: Fo...

CVE-2024-46598

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32056 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the sProfileName parameter at the "usergrp.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: F...

CVE-2024-46553

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46593

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the trapcomm parameter on the cgiswm.cgi page that fails to properly validate the length of the input data, an...

CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46552

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sDnsPro parameter of the v2x00.cgi page. An attacker can cause a...

CVE-2024-46584

CVE-2024-46584 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The issue is a buffer overflow in the AControlIp1 parameter on the acontrol.cgi page, caused by insufficient input length validation, which can be exploited to cause a Denial of Service. Multiple sources concur on the affected product...

CVE-2024-46550

DrayTek Vigor 3910 (firmware v4.3.2.6) is affected by CVE-2024-46550 due to a buffer overflow in the CGIbyFieldName parameter of chglog.cgi, which can be exploited to cause a Denial of Service. The connected sources consistently describe this vulnerability as enabling DoS via crafted input, with ...

CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46597

The CVE covers the DrayTek Vigor 3910, affected by a buffer overflow in the sPubKey parameter of dialin.cgi on firmware v4.3.2.6. The root cause is improper input length validation for sPubKey, enabling a crafted input to cause a Denial of Service. No exploitation details or mitigations are provi...

CVE-2024-46566

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46588

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46594

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46595

The vulnerability CVE-2024-46595 affects DrayTek Vigor 3910 (version 4.3.2.6). A buffer overflow in the saveitem parameter of the lan2lan.cgi page can be triggered by crafted input to cause a Denial of Service. The connected sources confirm the affected product and the impact; no remediation or p...

CVE-2024-46594

The CVE-2024-46594 entry concerns DrayTek Vigor 3910 firmware v4.3.2.6, where a buffer overflow exists in the saveVPNProfile parameter of v2x00.cgi. This is described as allowing a Denial of Service via crafted input. Documents confirm the affected component is the v2x00.cgi endpoint and that the...