A vulnerability was found in Draytek Vigor 3910 4.3.2.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file usergrp.cgi. The manipulation of the argument sProfileName leads to buffer overflow.
This vulnerability is known as CVE-2024-46585. The attack needs to be done within the local network. There is no exploit available.