Buffer Overflow Vulnerability in Draytek Vigor 3910 Could Lead to Denial of Service
CVE-2024-46581
7.5HIGH
Summary
A security vulnerability exists in the Draytek Vigor 3910 router, specifically in version 4.3.2.6, related to a buffer overflow issue within the sProfName parameter at v2x00.cgi. This flaw can be exploited by attackers through specially crafted input, resulting in a Denial of Service (DoS) condition that affects the normal operation of the device. Users of the affected version should take appropriate measures to mitigate the risks associated with this vulnerability.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published