Draytek Vigor3910 vulnerabilities, page 2

60 vulnerabilities

Known vulnerabilities in Draytek Vigor3910, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2024-51138draytek · vigor1000b_firmware +22 moredraytek vigor1000b_firmwareVigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier; Vigor3910 4.4.3.1 and earlier a stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This flaw occurs due to insufficient bounds checking on the amount of URL parameters, allowing an attacker to exploit the overflow by sending a maliciously crafted request. Consequently, a remote attacker can execute arbitrary code with elevated privileges.EPSS1.05%7.5HighCVE-2024-46581draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46559draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46582draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46558draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46583draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46593draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46560draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46588draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46566draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46584draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46596draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46591draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46597draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46550draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46589draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46585draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46554draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46551draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46568draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%