CVE-2024-41588

· HIGHAnalyzed

← All CVEs

CVSS v3.1

8.0

EPSS

0.33%

Published

Oct 3, 2024

Modified

Jun 11, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-120

Affected Products (51)

draytek · vigor2620_firmwarevulnerable

draytek · vigor2620

draytek · vigor2915_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2915

draytek · vigor2866_firmware (up to 4.4.5.2)vulnerable

draytek · vigor2866

draytek · vigor2766_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2766

draytek · vigor2865_firmware (up to 4.4.5.2)vulnerable

draytek · vigor2865

draytek · vigor2765_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2765

draytek · vigor2763_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2763

draytek · vigor2135_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2135

draytek · vigor166_firmware (up to 4.2.7)vulnerable

draytek · vigor166

draytek · vigor3912_firmware (up to 4.3.6.1)vulnerable

draytek · vigor3912

draytek · vigor1000b_firmware (up to 4.3.2.8)vulnerable

draytek · vigor1000b_firmware (up to 4.4.3.1)vulnerable

draytek · vigor1000b

draytek · vigor165_firmware (up to 4.2.7)vulnerable

draytek · vigor165

draytek · vigor3910_firmware (up to 4.3.2.8)vulnerable

draytek · vigor3910_firmware (up to 4.4.3.1)vulnerable

draytek · vigor3910

draytek · vigor2962_firmware (up to 4.3.2.8)vulnerable

draytek · vigor2962_firmware (up to 4.4.3.1)vulnerable

draytek · vigor2962

draytek · vigorlte200_firmwarevulnerable

draytek · vigorlte200

draytek · vigor2133_firmwarevulnerable

draytek · vigor2133

draytek · vigor2762_firmwarevulnerable

draytek · vigor2762

draytek · vigor2832_firmwarevulnerable

draytek · vigor2832

draytek · vigor2860_firmwarevulnerable

draytek · vigor2860

draytek · vigor2862_firmwarevulnerable

draytek · vigor2862

draytek · vigor2925_firmwarevulnerable

draytek · vigor2925

draytek · vigor2926_firmwarevulnerable

draytek · vigor2926

draytek · vigor2952_firmwarevulnerable

draytek · vigor2952

draytek · vigor3220_firmwarevulnerable

...and 1 more

References (2)

https://www.forescout.com/resources/draybreak-draytek-research/

MitigationTechnical DescriptionThird Party Advisory

https://www.forescout.com/resources/draytek14-vulnerabilities

Broken Link

KEV Catalog EPSS Scores Vendors All CVEs