Description
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.
Advisories 2
- WID-SEC-2024-3086 DrayTek Vigor Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2024
- NCSC-2024-0388 Kwetsbaarheden verholpen in Draytek Vigor routers NCSC-NL (Netherlands) · Oct 4, 2024