PT-2026-80945
CVE-2026-71911
·
تاريخ النشر
2026-08-24
·
تاريخ التحديث
2026-10-13
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DrayTek VigorAP (affected versions not specified)
Description
A buffer overflow exists in the
setLan() function due to missing length checks during memory copy operations. This issue affects the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker with valid administrative credentials for the web management interface can provide crafted input to cause a denial of service or execute arbitrary commands.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾