Browse CVEs

HIGH 8.8 CVE-2024-51304 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldap_search… Vigor3900 Firmware Mitigation only Fix from $1,9502024-10-30 HIGH 8.0 CVE-2024-48074 An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table … Vigor2960 Firmware No fix yet Fix from $1,9502024-10-28 CRITICAL 9.8 CVE-2024-48153 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_subco… Vigor3900 Firmware Mitigation only Fix from $2,3002024-10-14 HIGH 8.0 CVE-2024-46316 DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This … Vigor3900 Firmware Mitigation only Fix from $1,9502024-10-09 HIGH 7.5 CVE-2024-46589 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows at… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46590 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attack… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46591 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46592 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows att… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46593 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers … Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46594 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attac… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46595 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46596 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to ca… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46597 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers t… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46598 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attacke… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46558 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46559 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attacke… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46560 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46561 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers t… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46564 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attac… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46565 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46566 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers … Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46567 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attacker… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46568 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to c… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46571 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46580 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cau… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46581 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers … Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46582 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers t… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46583 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attacker… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46584 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attac… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18 HIGH 7.5 CVE-2024-46585 Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. This vulnerability allows attac… Vigor3910 Firmware Mitigation only Fix from $1,9502024-09-18