PT-2024-9707 · Draytek · Draytek Vigor

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor version 4.3.2.6 Description: The issue is related to a buffer overflow in the saveVPNProfile parameter at the "v2x00.cgi" API endpoint. This can be exploited by a remote attacker to cause a Denial of Service DoS via a crafted...

PT-2024-32040 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow was discovered in the newProname parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations: For...

CVE-2024-46552

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sStRtMskShow parameter of the ipstrt.cgi page. An attacker can cause...

CVE-2024-46557

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sProfName parameter of the v2x00.cgi page. An attacker can cause a...

CVE-2024-46588

CVE-2024-46588 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The issue is a buffer overflow in the sProfileName parameter of wizfw.cgi, leading to Denial of Service via crafted input. Exploitation details are not provided in the connected documents; no remediation or workaround is stated in the...

CVE-2024-46556

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sInRCSecret0 parameter of v2x00.cgi, enabling Denial of Service via crafted input. Affected product and exact root cause are stated in multiple sources (CVE-2024-46556; NVD/Red Hat/CNNVD). Exploitation details are not provid...

CVE-2024-46552

CVE-2024-46552 affects DrayTek Vigor 3910, specifically version v4.3.2.6, where a buffer overflow in the sStRtMskShow parameter on ipstrt.cgi can cause a Denial of Service. This is the concrete detail provided across connected sources; no exploitation methods or mitigations are described in the d...

CVE-2024-46585

CVE-2024-46585 affects Draytek Vigor 3910 (v4.3.2.6) with a buffer overflow in the sProfileName parameter on the usergrp.cgi endpoint, allowing a crafted input to trigger a Denial of Service. The issue is caused by a vulnerability in that parameter handling. There is no public patch/version fix d...

CVE-2024-46559

CVE-2024-46559 (DrayTek Vigor 3910) : The DrayTek Vigor 3910, version 4.3.2.6, contains a buffer overflow in the parameter sBPA_UsrNme on the page inet15.cgi . A crafted input can trigger a Denial of Service (DoS) and may cause the device to crash. Connected sources describe the vulnerability con...

CVE-2024-46595

The vulnerability CVE-2024-46595 affects DrayTek Vigor 3910 (version 4.3.2.6). A buffer overflow in the saveitem parameter of the lan2lan.cgi page can be triggered by crafted input to cause a Denial of Service. The connected sources confirm the affected product and the impact; no remediation or p...

CVE-2024-46566

Draytek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the sAppName parameter of sslapp.cgi, leading to Denial of Service via crafted input. Several sources corroborate the issue and impact on the affected device; a patch/version with fix is not provided in the documents. A temp...

CVE-2024-46580

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46591

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the fid parameter of the v2x00.cgi page. An attacker can cause a denial ...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sSrvAddr parameter of the v2x00.cgi page. An attacker can cause a...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sAppName parameter of the sslapp.cgi page. An attacker can cause a...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the trapcomm parameter on the cgiswm.cgi page that fails to properly validate the length of the input data, an...

CVE-2024-46594

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...