draytek Vulnerability Advisory Catalog

Total 134 security vulnerabilities recorded for draytek software and firmware.

← Back to All Vendors
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers t...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to caus...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers ...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to ca...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers t...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers ...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attack...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers to...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to ...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attacker...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers ...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attacker...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attacker...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attacke...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers t...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3910_firmware

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attac...

📅 2024-09-18
CVSS 7.5 Dossier →
Component: vigor3900_firmware

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string fun...

📅 2024-09-06
CVSS 8.8 Dossier →
Component: vigor3900_firmware

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command functi...

📅 2024-09-06
CVSS 8.8 Dossier →
Component: vigor300b_firmware

DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contai...

📅 2024-08-21
CVSS 8.0 Dossier →
Component: vigor3910_firmware

A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the fun...

📅 2024-03-20
CVSS 7.5 Dossier →
Page 4 of 6 (134 Total Records)