CVE-2026-71940: DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Limit access to the DrayTek VigorSwitch web management interface to authorized administrators only, since exploitation requires valid administrative credentials.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to reach the device's web management interface and possess valid administrative credentials. The provided information does not indicate that unauthenticated users can exploit it.
What impact could successful exploitation have?
Crafted input in the ACL general setup Edit ACE name field can trigger a buffer overflow. This may cause a denial of service or potentially allow arbitrary command execution, affecting confidentiality, integrity, and availability.
How can I determine whether a device is potentially exposed?
Devices in the DrayTek VigorSwitch product line with an accessible web management interface and administrative accounts are potentially exposed. Review the vendor security advisory for the affected models and remediation information.