CyberRota Analysis
AI-GeneratedMultiple DrayTek VigorSwitch models are vulnerable to a buffer overflow in the acl_general_setup Edit ACE function, which occurs due to improper length validation when copying the name field into a fixed-size buffer. This vulnerability can be exploited by remote attackers with valid administrative credentials, potentially leading to denial of service or arbitrary command execution. Network administrators managing affected devices should prioritize patching to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.