CVE-2026-71939: DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs valid administrative credentials for the device's web management interface. The issue is remotely reachable through that interface.
What is the likely impact of successful exploitation?
Successful exploitation can cause a denial of service and may potentially allow arbitrary command execution. The stated impact includes high confidentiality, integrity, and availability effects.
What input triggers the overflow?
The vulnerable path is the acl_general_setup Add ACE function. A crafted name field can overflow a fixed-size buffer because its length is not validated.