CVE-2024-41584

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter...

CVE-2024-41584

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high-performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version 4.3.2.6 and prior versions, which stems from a lack of validation of the sFormAuthStr parameter...

CVE-2024-41584

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter...

CVE-2024-41584

DrayTek Vigor3910 devices running firmware version 4.3.2.6 and prior are vulnerable to a reflected cross-site scripting (XSS) attack. The root cause is the missing validation of the sFormAuthStr parameter in the web interface. This vulnerability can be exploited by authenticated users to perform ...

CVE-2024-41584

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter...

CVE-2024-41584: Improper Neutralization of Input During Web Page Generation

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter...

PT-2024-7435

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3910 versions 4.3.2.6 and earlier Description: The issue is caused by a reflected XSS vulnerability due to missing validation of the sFormAuthStr parameter. This allows authenticated users to conduct cross-site scripting attacks...