Buffer Overflow in Draytek Vigor 3910 Product

CVE-2024-46557

Summary

The vulnerability in Draytek Vigor 3910 relates to a buffer overflow issue found in the sProfileName parameter of the v2x00.cgi script. This security flaw potentially allows attackers to exploit the affected device by sending specially crafted input, which can lead to a Denial of Service (DoS). Consequently, legitimate users may experience disruptions in service, impacting the availability and functionality of their network resources. It is essential for users to take appropriate measures to safeguard their devices against this vulnerability.

References