Vigor3910 Firmware vulnerabilities
52 known vulnerabilities in Vigor3910 Firmware from DrayTek. 52 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- 7.5 High severity
vigor3910_firmware: Improper Limitation of a Pathname to a Restricted Directory
A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information.
- 9.8 Critical severity
Vigor3910 Firmware: Buffer Copy without Checking Size of Input
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.