Description
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6.
Advisories 2
- WID-SEC-2024-3086 DrayTek Vigor Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2024
- NCSC-2024-0388 Kwetsbaarheden verholpen in Draytek Vigor routers NCSC-NL (Netherlands) · Oct 4, 2024