8.6

CVE-2026-71912

DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerDrayTek Corporation
≫
Produkt VigorAP 918R
Default Statusunaffected
Version 0
Version < 1.4.11
Status affected
HerstellerDrayTek Corporation
≫
Produkt VigorAP 960C
Default Statusunaffected
Version 0
Version < 1.4.12
Status affected
HerstellerDrayTek Corporation
≫
Produkt VigorAP 1060C
Default Statusunaffected
Version 0
Version < 1.4.12
Status affected
HerstellerDrayTek Corporation
≫
Produkt VigorAP 906
Default Statusunaffected
Version 0
Version < 1.4.13
Status affected
HerstellerDrayTek Corporation
≫
Produkt VigorAP 912C
Default Statusunaffected
Version 0
Version < 1.4.15
Status affected
HerstellerDrayTek Corporation
≫
Produkt VigorAP 903
Default Statusunaffected
Version 0
Version < 1.4.22
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.391
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
disclosure@vulncheck.com 8.6 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
disclosure@vulncheck.com 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://www.draytek.com/about/security-advisory/multiple-remote-code-execution-and-buffer-overflow-vulnerabilities-in-vigorap-series-august-2026/
https://www.vulncheck.com/advisories/draytek-vigorap-multiple-models-buffer-overflow-via-apautotest