CyberRota Analysis
AI-GeneratedMultiple DrayTek VigorSwitch models are susceptible to a buffer overflow vulnerability in the acl_general_setup Add ACE function, which occurs due to inadequate length validation when copying the name field into a fixed-size buffer. A remote attacker with valid administrative credentials can exploit this flaw to cause a denial of service or potentially execute arbitrary commands on the device. Organizations using affected VigorSwitch models should prioritize patching this vulnerability to mitigate risks associated with unauthorized access and service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.