CVE-2022-32548

CVE-2022-32548 affects DrayTek Vigor routers (e.g., Vigor3910) with firmware prior to 4.3.1.1. The vulnerability is a buffer overflow in the web management interface at /cgi-bin/wlogin.cgi triggered by crafted input in the username or password fields (aa/ab), enabling unauthenticated remote code ...

CVE-2024-51138

CVE-2024-51138 affects DrayTek Vigor series (e.g., Vigor165/166, Vigor2620/LTE200, Vigor2860/2925, Vigor2862/2926, Vigor2133/2762/2832, Vigor2135/2765/2766, Vigor2865/2866/2927, Vigor2962, Vigor3912, Vigor3910). The vulnerability is a stack-based buffer overflow in the URL parsing of the TR069 ST...

CVE-2024-51139

The CVE-2024-51139 entry describes a Buffer Overflow in DrayTek/Vigor devices where the CGI parser mishandles the Content-Length header of HTTP POST requests, enabling potential remote arbitrary-code execution. Affected devices and versions include Vigor2620/LTE200 up to 3.9.8.9 and earlier, Vigo...

CVE-2024-41334

Affected devices: DrayTek Vigor series including Vigor 165/166 (before 4.2.6), Vigor 2620/LTE200 (before 3.9.8.8), Vigor 2860/2925 (before 3.9.7), Vigor 2862/2926 (before 3.9.9.4), Vigor 2133/2762/2832 (before 3.9.8), Vigor 2135/2765/2766 (before 4.4.5.1), Vigor 2865/2866/2927 (before 4.4.5.3), V...

CVE-2023-23313

CVE-2023-23313 affects DrayTek Vigor routers via XSS in the wlogin.cgi and user_login.cgi web portal scripts. Affected models span multiple series and firmware versions (e.g., Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865/2866 v4.4.1.0; Vigor2927 v4.4.2.2; Vigor2915, Vigor2765/2766/2135 v4...

CVE-2024-23721

CVE-2024-23721 concerns a Directory Traversal in the Draytek Vigor3910, specifically in the process_post function. Affected product/version: Draytek Vigor3910 4.3.2.5 and earlier. The issue is triggered by a crafted POST request that causes the function to export information, indicating a potenti...

CVE-2024-41592

CVE-2024-41592 affects DrayTek Vigor3910 devices up to 4.3.2.6. The issue is a stack-based overflow in the GetCGI function when processing query string parameters (extraneous ampersands and long key–value pairs). Exploitation could lead to arbitrary code execution or DoS as described in multiple ...

CVE-2023-33778

Summary: CVE-2023-33778 relates to Draytek Vigor devices (Routers, Access Points, Switches, Myvigor) that ship with hardcoded encryption keys. This flaw lets an attacker bind an affected device to their own account and subsequently create WCF and DrayDDNS licenses and synchronize them from the we...

CVE-2024-41593

CVE-2024-41593 affects DrayTek Vigor310 devices up to version 4.3.2.6. The vulnerability is a heap-based buffer overflow in the web interface function ft_payload_dns due to a byte sign-extension in the length argument of a memcpy call, enabling remote code execution. Connected sources confirm the...

CVE-2024-41340

The CVE-2024-41340 issue affects multiple Draytek Vigor devices, where an attacker can upload crafted APP Enforcement modules, leading to arbitrary code execution. Affected models and minimum patched versions include: Vigor 165/166 before 4.2.6 (update to 4.2.6+), Vigor 2620/LTE200 before 3.9.8.8...

CVE-2024-41594

DrayTek Vigor310 devices up to version 4.3.2.6 are affected by CVE-2024-41594 due to the httpd server seeding the OpenSSL PRNG with a static string. This enables an information-disclosure vector (and related MITM risk) via the Vigor310 management UI. Connected sources provide concrete details: af...

CVE-2024-41339

The CVE-2024-41339 entry concerns DrayTek Vigor routers where the CGI endpoint used to upload configurations allows uploading a crafted kernel module, enabling arbitrary code execution. Affected are multiple models and firmware ranges (e.g., Vigor 165/166 before 4.2.6; 2620/LTE200 before 3.9.8.8;...

CVE-2024-41588

Affected software: DrayTek Vigor3910 (through 4.3.2.6). Vulnerable endpoints: CGI pages /cgi-bin/v2x00.cgi and /cgi-bin/cgiwcg.cgi. Root cause: Missing bounds checking in POST parameters passed to strncpy, allowing a buffer overflow. Actors: Authenticated users. Impact (as stated): Buffer overflo...

CVE-2024-41585

DrayTek Vigor3910 devices up to version 4.3.2.6 are affected by an OS command injection in the recvCmd binary, allowing an attacker to escape the emulated instance and inject commands into the host. This vulnerability enables arbitrary command execution with high impact to confidentiality, integr...

CVE-2024-41587

CVE-2024-41587 affects DrayTek Vigor310 devices (through firmware 4.3.2.6) with a stored XSS in the login page greeting introduced by poor sanitization. Authenticated users can inject script via the Greeting message, with impact limited to the affected web UI context (confidentiality/integrity im...

CVE-2024-41591

CVE-2024-41591 affects DrayTek Vigor3910 devices (firmware up to 4.3.2.6) with an unauthenticated DOM-based reflected XSS in the Web UI. Root cause: insufficient protection for the web page structure in the router’s firmware, enabling manipulation of the DOM by crafted input. Impact: cross-site s...

CVE-2024-41338

CVE-2024-41338 describes a NULL pointer dereference in DrayTek Vigor devices that allows a Denial of Service (DoS) when handling crafted DHCP requests. Affected devices and minimum vulnerable/patch versions include: Vigor 165/166 prior to 4.2.6; 2620/LTE200 prior to 3.9.8.8; 2860/2925 prior to 3....

CVE-2024-41590

CVE-2024-41590 affects DrayTek Vigor310 routers, where the web UI CGI endpoints expose a buffer overflow via missing bounds checks on POST parameters passed to strcpy. Affected firmware includes versions up to 4.3.2.6, and exploitation requires authenticated access. The Red Hat/NCSC/PT-Security e...

CVE-2024-41596

CVE-2024-41596 affects DrayTek Vigor310 devices (versions up to 4.3.2.6). The vulnerability is a buffer overflow in the web UI caused by improper retrieval/handling of CGI form parameters, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service via crafted re...

CVE-2024-46564

The CVE-2024-46564 entry refers to a buffer overflow in DrayTek Vigor 3910 v4.3.2.6, specifically in the sProfileName parameter of the fextobj.cgi endpoint. The underlying issue is a buffer overflow that can be exploited to cause a Denial of Service (DoS) via crafted input. The available connecte...

CVE-2024-41595

CVE-2024-41595 affects DrayTek Vigor310 devices up to firmware 4.3.2.6, with a flaw in CGI handling (read/write operations) due to missing bounds checks. This enables a remote attacker to change settings or cause a denial of service via the web UI. Red Hat and NVD corroborate the vulnerability de...

CVE-2024-41583

CVE-2024-41583 affects DrayTek Vigor3910 devices up to firmware 4.3.2.6, enabling stored XSS by authenticated users due to poor sanitization of the router name. Impact is limited to web UI context with MEDIUM severity (CVSS 3.1: 4.7). Red Hat and NVD corroborate the issue; NCSC notes vendors have...

CVE-2024-46550

DrayTek Vigor 3910 (firmware v4.3.2.6) is affected by CVE-2024-46550 due to a buffer overflow in the CGIbyFieldName parameter of chglog.cgi, which can be exploited to cause a Denial of Service. The connected sources consistently describe this vulnerability as enabling DoS via crafted input, with ...

CVE-2024-46551

CVE-2024-46551 affects DrayTek Vigor 3910 (v4.3.2.6). The vulnerability is a buffer overflow in the sBPA_Pwd parameter in the inet15.cgi page, which can be triggered by crafted input and leads to a Denial of Service. Multiple sources confirm the root cause and affected component, but none provide...

CVE-2024-46589

CVE-2024-46589 affects Draytek Vigor 3910 (v4.3.2.6). The issue is a buffer overflow in the sIpv6AiccuUser parameter on the inetipv6.cgi page, leading to a Denial of Service under crafted input. Documented in multiple sources (NVD/Red Hat/NVD mirror entries) with a CVSS v3.1 impact of 7.5 (Availa...

CVE-2024-46557

DrayTek Vigor 3910 (v4.3.2.6) is affected by CVE-2024-46557 due to a buffer overflow in the sProfileName parameter of the v2x00.cgi endpoint, causing Denial of Service via crafted input. Affected component: the v2x00.cgi handler, specifically the sProfileName field. Impact per sources: DoS with n...

CVE-2024-46594

The CVE-2024-46594 entry concerns DrayTek Vigor 3910 firmware v4.3.2.6, where a buffer overflow exists in the saveVPNProfile parameter of v2x00.cgi. This is described as allowing a Denial of Service via crafted input. Documents confirm the affected component is the v2x00.cgi endpoint and that the...

CVE-2024-46596

DrayTek Vigor 3910 (firmware v4.3.2.6) contains a buffer overflow in the sAct parameter of the v2x00.cgi page, enabling a Denial of Service via crafted input. No explicit exploitation details or patches are provided in the connected documents. Affected product/impact are stated; remediation is no...

CVE-2024-46585

CVE-2024-46585 affects Draytek Vigor 3910 (v4.3.2.6) with a buffer overflow in the sProfileName parameter on the usergrp.cgi endpoint, allowing a crafted input to trigger a Denial of Service. The issue is caused by a vulnerability in that parameter handling. There is no public patch/version fix d...

CVE-2024-46591

CVE-2024-46591 affects DrayTek Vigor 3910 running version 4.3.2.6. The issue is a buffer overflow in the sDnsPro parameter handled by v2x00.cgi, enabling a crafted input to cause a Denial of Service. The available documents do not provide exploitation details, affected attack methods, or the curr...

CVE-2024-46598

CVE-2024-46598 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the iprofileidx parameter of dialin.cgi allows remote attackers to cause a Denial of Service via a crafted input. The issue is accessible over the network (vector: NETWORK) with low attack complexity and no user interactio...

CVE-2024-41586

CVE-2024-41586 affects DrayTek Vigor310 devices (through 4.3.2.6). The flaw is a stack-based buffer overflow in the Web UI CGI component /cgi-bin/ipfedr.cgi exploited by a long query string, enabling a remote attacker to execute arbitrary code. Public documentation confirms the affected product a...

CVE-2024-46560

CVE-2024-46560 affects Draytek Vigor 3910 (version 4.3.2.6). The root cause is a buffer overflow in the pub_key parameter handled by the v2x00.cgi endpoint, leading to Denial of Service. Public sources in the provided documents confirm the affected software and vulnerable component, and several t...

CVE-2024-46566

Draytek Vigor 3910 (version 4.3.2.6) is affected by a buffer overflow in the sAppName parameter of sslapp.cgi, leading to Denial of Service via crafted input. Several sources corroborate the issue and impact on the affected device; a patch/version with fix is not provided in the documents. A temp...

CVE-2024-46568

The CVE-2024-46568 entry concerns DrayTek Vigor 3910 devices running v4.3.2.6, where a buffer overflow in the sPeerId parameter of vpn.cgi can be triggered to cause a Denial of Service. The NVD and related records list a CVSSv3.1 base score of 7.5 (Network, Low attack complexity, No privileges, N...

CVE-2024-46571

CVE-2024-46571 affects DrayTek Vigor 3910 (fwuser.cgi) where a buffer overflow in the sPPPSrvNm parameter can be triggered by crafted input, leading to a Denial of Service (DoS) and availability impact. The vulnerability is documented with a CVSS v3.1 base score of 7.5 (HIGH) with network attack ...

CVE-2024-46554

CVE-2024-46554 affects DrayTek Vigor 3910 (v4.3.2.6) with a buffer overflow in the profname parameter of the v2x00.cgi endpoint, enabling Denial of Service via crafted input. The root cause is a vulnerability in handling profname that can overflow memory. Affected product/version explicitly ident...

CVE-2024-46597

The CVE covers the DrayTek Vigor 3910, affected by a buffer overflow in the sPubKey parameter of dialin.cgi on firmware v4.3.2.6. The root cause is improper input length validation for sPubKey, enabling a crafted input to cause a Denial of Service. No exploitation details or mitigations are provi...

CVE-2024-41584

CVE-2024-41584 affects DrayTek Vigor3910 devices up to firmware 4.3.2.6, where a reflected XSS vulnerability exists due to missing validation of the sFormAuthStr parameter. The issue is exploitable by authenticated users via the Web UI, with CVSS 3.1 base score 4.7 (Network, Low attack complexity...

CVE-2024-46552

CVE-2024-46552 affects DrayTek Vigor 3910, specifically version v4.3.2.6, where a buffer overflow in the sStRtMskShow parameter on ipstrt.cgi can cause a Denial of Service. This is the concrete detail provided across connected sources; no exploitation methods or mitigations are described in the d...

CVE-2024-46561

Affected product/variant: DrayTek Vigor 3910, firmware v4.3.2.6. Component/endpoint: vulnerable in the queryret parameter of the v2x00.cgi endpoint. Root cause: buffer overflow in queryret leading to DoS. Impact: Denial of Service via crafted input; CVSS 3.1 base score 7.5 (NETWORK, HIGH impact o...

CVE-2024-46586

Draytek Vigor 3910 v4.3.2.6 is affected by CVE-2024-46586 due to a buffer overflow in the sCloudPass parameter of the v2x00.cgi page. Exploitation leads to a Denial of Service (DoS) via a crafted input. Documented impact follows the CVSS vector: Network access, Low attack complexity, No privilege...

CVE-2024-46559

CVE-2024-46559 (DrayTek Vigor 3910) : The DrayTek Vigor 3910, version 4.3.2.6, contains a buffer overflow in the parameter sBPA_UsrNme on the page inet15.cgi . A crafted input can trigger a Denial of Service (DoS) and may cause the device to crash. Connected sources describe the vulnerability con...

CVE-2024-46590

CVE-2024-46590 affects DrayTek Vigor 3910, firmware 4.3.2.6, with a buffer overflow in the ssidencrypt%d parameter of the v2x00.cgi endpoint. This leads to a Denial of Service via crafted input. Documents describe the vulnerability consistently across multiple sources, with network-based, low‑com...

CVE-2024-41589

CVE-2024-41589 affects DrayTek Vigor310 devices up to firmware version 4.3.2.6, where authentication requests are performed over unencrypted HTTP. The vulnerability is described as enabling adversaries to compromise confidentiality, integrity, and availability, with a CVSS v3.1 base score of 8.8 ...

CVE-2024-46567

Summary of CVE-2024-46567 : Affects DrayTek Vigor 3910 (version v4.3.2.6). A buffer overflow in the iProfileIdx parameter of the page v2x00.cgi can trigger a DoS with crafted input. The CVSS base score is 7.5 (High) with network access, no privileges required, no user interaction. No exploitation...

CVE-2024-46581

Summary: CVE-2024-46581 affects DrayTek Vigor 3910, version 4.3.2.6. The issue is a buffer overflow in the sProfName parameter of the v2x00.cgi page, which can cause a Denial of Service (DoS) via a crafted input. Connected sources corroborate the same flaw and affected component path. Impact: DoS...

CVE-2024-46583

CVE-2024-46583 affects DrayTek Vigor 3910 (v4.3.2.6). A buffer overflow in the extRadSrv2 parameter of the cgiapp.cgi endpoint allows remote attackers to cause a Denial of Service with a crafted input. All sources in connected documents describe this vulnerability and its impact; no patch/version...

CVE-2024-46592

Affected product : DrayTek Vigor 3910 (v4.3.2.6). Vulnerability : buffer overflow in the ssidencrypt_5g%d parameter of the v2x00.cgi page. Impact : Denial of Service (DoS) via crafted input; CVSS 3.1 base score 7.5 (HIGH) with network access and no user interaction required. Root cause : overflow...

CVE-2024-46595

The vulnerability CVE-2024-46595 affects DrayTek Vigor 3910 (version 4.3.2.6). A buffer overflow in the saveitem parameter of the lan2lan.cgi page can be triggered by crafted input to cause a Denial of Service. The connected sources confirm the affected product and the impact; no remediation or p...