PT-2024-9702 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: The issue is related to a buffer overflow in the sAppName parameter at the "sslapp.cgi" endpoint. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability ca...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sPeerId parameter of the vpn.cgi page. An attacker can cause a denia...

CVE-2024-46580

CVE-2024-46580 affects DrayTek Vigor 3910, version 4.3.2.6. A buffer overflow in the fid parameter of the v2x00.cgi page can cause a Denial of Service (DoS) with a crafted input. The connected documents provide the same vulnerability description; no explicit exploit details, affected other versio...

CVE-2024-46550

DrayTek Vigor 3910 (firmware v4.3.2.6) is affected by CVE-2024-46550 due to a buffer overflow in the CGIbyFieldName parameter of chglog.cgi, which can be exploited to cause a Denial of Service. The connected sources consistently describe this vulnerability as enabling DoS via crafted input, with ...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the ssidencrypt5g%d parameter of the v2x00.cgi page. An attacker could...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46553

CVE-2024-46553 affects Draytek Vigor 3910 (version 4.3.2.6). A buffer overflow in the ipaddrmsk%d parameter of the v2x00.cgi endpoint allows a crafted input to trigger a Denial of Service over a network connection. Exploitation details are not provided; information in the PT-2024-32035 advisory o...

CVE-2024-46582

CVE-2024-46582 affects DrayTek Vigor 3910 (firmware v4.3.2.6). The vulnerability is a buffer overflow in the sSrvAddr parameter of v2x00.cgi, enabling a Denial of Service via crafted input. Root cause and vendor-page details are corroborated by Red Hat and NVD family entries, CNNVD, and CVE recor...

CVE-2024-46551

CVE-2024-46551 affects DrayTek Vigor 3910 (v4.3.2.6). The vulnerability is a buffer overflow in the sBPA_Pwd parameter in the inet15.cgi page, which can be triggered by crafted input and leads to a Denial of Service. Multiple sources confirm the root cause and affected component, but none provide...

CVE-2024-46598

CVE-2024-46598 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the iprofileidx parameter of dialin.cgi allows remote attackers to cause a Denial of Service via a crafted input. The issue is accessible over the network (vector: NETWORK) with low attack complexity and no user interactio...

CVE-2024-46558

DrayTek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the newProname parameter of the v2x00.cgi endpoint, which can lead to Denial of Service (DoS) via crafted input. The CVE-2024-46558 entry is corroborated across multiple sources in the connected documents, including Red Hat ...

CVE-2024-46593

CVE-2024-46593 concerns the DrayTek Vigor 3910, affected hardware and firmware: v4.3.2.6. The vulnerability is a buffer overflow in the trapcomm parameter of the cgiswm.cgi page, leading to a Denial of Service when processed input is crafted. The available connected documents consistently describ...

CVE-2024-46565

DrayTek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the sSrvName parameter of the service.cgi endpoint, enabling Denial of Service via crafted input. The vulnerability is documented across multiple sources with no explicit patch version provided. Mitigation guidance varies: s...

CVE-2024-46589

CVE-2024-46589 affects Draytek Vigor 3910 (v4.3.2.6). The issue is a buffer overflow in the sIpv6AiccuUser parameter on the inetipv6.cgi page, leading to a Denial of Service under crafted input. Documented in multiple sources (NVD/Red Hat/NVD mirror entries) with a CVSS v3.1 impact of 7.5 (Availa...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

CVE-2024-43027

DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...

CVE-2024-43027

DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...

PT-2024-30260 · Draytek · Draytek Vigor300B +2

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 versions prior to v1.5.1.5 Beta DrayTek Vigor 2960 versions prior to v1.5.1.5 Beta DrayTek Vigor 300B versions prior to v1.5.1.5 Beta Description: A command injection vulnerability was discovered via the action parameter at...

CVE-2024-43027

DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...

CVE-2024-43027

Affected products: DrayTek Vigor 3900, 2960, and 300B with versions prior to 1.5.1.5_Beta. Vulnerability: command injection via the action parameter in cgi-bin/mainfunction.cgi, as reported by multiple sources. Root cause: input in the action parameter allows execution of arbitrary commands on th...