CVE-2024-51139

A buffer overflow vulnerability exists in the CGI parser of various DrayTek Vigor routers. The flaw is caused by improper handling of the **

CVE-2024-51138

A stack-based buffer overflow vulnerability exists in the URL parsing functionality of the TR069 STUN server across various DrayTek Vigor models. The root cause is insufficient bounds checking on the amount of URL parameters, which allows a remote attacker to send a maliciously crafted request to...

CVE-2023-23313

CVE-2023-23313 affects DrayTek Vigor routers via XSS in the wlogin.cgi and user_login.cgi web portal scripts. Affected models span multiple series and firmware versions (e.g., Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865/2866 v4.4.1.0; Vigor2927 v4.4.2.2; Vigor2915, Vigor2765/2766/2135 v4...

CVE-2024-41592

DrayTek Vigor3910 devices running firmware version 4.3.2.6 and earlier are susceptible to a stack-based buffer overflow within the GetCGI() function. This flaw occurs because the system mishandles long key-value pairs and extraneous ampersand characters when processing query string parameters. A ...

CVE-2024-41593

CVE-2024-41593 affects DrayTek Vigor310 devices up to version 4.3.2.6. The vulnerability is a heap-based buffer overflow in the web interface function ft_payload_dns due to a byte sign-extension in the length argument of a memcpy call, enabling remote code execution. Connected sources confirm the...

CVE-2024-41594

DrayTek Vigor310 devices up to version 4.3.2.6 are affected by CVE-2024-41594 due to the httpd server seeding the OpenSSL PRNG with a static string. This enables an information-disclosure vector (and related MITM risk) via the Vigor310 management UI. Connected sources provide concrete details: af...

CVE-2024-41588

The DrayTek Vigor3910 router (versions through 4.3.2.6 ) contains a buffer overflow vulnerability in the /cgi-bin/v2x00.cgi and /cgi-bin/cgiwcg.cgi CGI endpoints. The root cause is a lack of bounds checking on parameters passed via POST requests to the strncpy function. Authenticated users can ex...

CVE-2024-41591

CVE-2024-41591 affects DrayTek Vigor3910 devices (firmware up to 4.3.2.6) with an unauthenticated DOM-based reflected XSS in the Web UI. Root cause: insufficient protection for the web page structure in the router’s firmware, enabling manipulation of the DOM by crafted input. Impact: cross-site s...

CVE-2024-41587

CVE-2024-41587 affects DrayTek Vigor310 devices (through firmware 4.3.2.6) with a stored XSS in the login page greeting introduced by poor sanitization. Authenticated users can inject script via the Greeting message, with impact limited to the affected web UI context (confidentiality/integrity im...

CVE-2024-41590

The DrayTek Vigor310 router, in versions up to 4.3.2.6 , is susceptible to a stack-based buffer overflow vulnerability in its web interface. The root cause is a missing bounds check on parameters passed through POST requests to the strcpy function across several CGI endpoints . An authenticated u...

CVE-2024-41596

DrayTek Vigor310 devices running firmware version 4.3.2.6 and earlier are susceptible to a Buffer Overflow vulnerability within the Vigor management UI . The root cause is the improper retrieval and handling of CGI form parameters , specifically the copying of buffers without checking the size of...