CVE-2024-46598

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:draytek:vigor3910_firmware:4.3.2.6:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*

History

24 Sep 2024, 16:37

Type Values Removed Values Added
First Time Draytek vigor3910 Firmware
Draytek vigor3910
Draytek
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
References () https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#0875f261ad5c4e1ba59448d49a261a99 - () https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#0875f261ad5c4e1ba59448d49a261a99 - Permissions Required
CWE CWE-120
CPE cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor3910_firmware:4.3.2.6:*:*:*:*:*:*:*

20 Sep 2024, 12:30

Type Values Removed Values Added
Summary
  • (es) Se descubrió que Draytek Vigor 3910 v4.3.2.6 contenía un desbordamiento de búfer en el parámetro iprofileidx en dialin.cgi. Esta vulnerabilidad permite a los atacantes provocar una denegación de servicio (DoS) a través de una entrada manipulada.

18 Sep 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-18 15:15

Updated : 2024-09-24 16:37


NVD link : CVE-2024-46598

Mitre link : CVE-2024-46598

CVE.ORG link : CVE-2024-46598


JSON object : View

Products Affected

draytek

  • vigor3910
  • vigor3910_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')