Draytek vulnerabilities, page 5

144 vulnerabilities

Known vulnerabilities in Draytek products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 143 products.

8HighCVE-2024-43027draytek · vigor2960 +2 moredraytek vigor2960DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.EPSS1.30%7.5HighCVE-2024-46581draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46559draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46582draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46558draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46583draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46593draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46560draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46588draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46566draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46584draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46596draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46591draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%7.5HighCVE-2024-46597draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46550draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46589draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46585draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.45%7.5HighCVE-2024-46554draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46551draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.52%7.5HighCVE-2024-46568draytek · vigor3910_firmwaredraytek vigor3910_firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.EPSS0.42%