Draytek Vigor3910 vulnerabilities, page 3

60 vulnerabilities

Known vulnerabilities in Draytek Vigor3910, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2024-46598draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46595draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46594draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46553draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46555draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46567draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46556draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46592draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46571draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46557draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46580draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46590draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46561draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46564draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46565draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46586draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46552draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-23721draytek · vigor3910_firmwaredraytek vigor3910_firmwareA Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information.EPSS0.85%9.8CriticalCVE-2023-33778draytek · myvigor +71 moredraytek myvigorDraytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.EPSS0.59%6.1MediumCVE-2023-23313draytek · vigor1000b_firmware +90 moredraytek vigor1000b_firmwareCertain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.EPSS0.36%