Buffer Overflow in sProfileName Parameter at usergrp.cgi Causes Denial of Service

CVE-2024-46585

Summary

The Draytek Vigor 3910, specifically version 4.3.2.6, is susceptible to a buffer overflow vulnerability found within the sProfileName parameter at usergrp.cgi. This flaw can allow malicious actors to send specially crafted input that leads to a Denial of Service (DoS), potentially disrupting the normal operation of the device. Network administrators should be vigilant and consider best practices for securing their devices against possible exploit attempts.

References