CVE-2024-41593

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

0.89%

Published

Oct 3, 2024

Modified

Mar 13, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787CWE-787

Affected Products (51)

draytek · vigor3912_firmware (up to 4.3.6.1)vulnerable

draytek · vigor3912

draytek · vigor2962_firmware (up to 4.3.2.8)vulnerable

draytek · vigor2962_firmware (up to 4.4.3.1)vulnerable

draytek · vigor2962

draytek · vigor3910_firmware (up to 4.3.2.8)vulnerable

draytek · vigor3910_firmware (up to 4.4.3.1)vulnerable

draytek · vigor3910

draytek · vigor165_firmware (up to 4.2.7)vulnerable

draytek · vigor165

draytek · vigor1000b_firmware (up to 4.3.2.8)vulnerable

draytek · vigor1000b_firmware (up to 4.4.3.1)vulnerable

draytek · vigor1000b

draytek · vigor166_firmware (up to 4.2.7)vulnerable

draytek · vigor166

draytek · vigor2135_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2135

draytek · vigor2763_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2763

draytek · vigor2765_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2765

draytek · vigor2865_firmware (up to 4.4.5.2)vulnerable

draytek · vigor2865

draytek · vigor2766_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2766

draytek · vigor2866_firmware (up to 4.4.5.2)vulnerable

draytek · vigor2866

draytek · vigor2915_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2915

draytek · vigor2620_firmwarevulnerable

draytek · vigor2620

draytek · vigorlte200_firmwarevulnerable

draytek · vigorlte200

draytek · vigor2133_firmwarevulnerable

draytek · vigor2133

draytek · vigor2762_firmwarevulnerable

draytek · vigor2762

draytek · vigor2832_firmwarevulnerable

draytek · vigor2832

draytek · vigor2860_firmwarevulnerable

draytek · vigor2860

draytek · vigor2862_firmwarevulnerable

draytek · vigor2862

draytek · vigor2925_firmwarevulnerable

draytek · vigor2925

draytek · vigor2926_firmwarevulnerable

draytek · vigor2926

draytek · vigor2952_firmwarevulnerable

draytek · vigor2952

draytek · vigor3220_firmwarevulnerable

...and 1 more

References (2)

https://www.forescout.com/resources/draybreak-draytek-research/

MitigationTechnical DescriptionThird Party Advisory

https://www.forescout.com/resources/draytek14-vulnerabilities

Broken Link

KEV Catalog EPSS Scores Vendors All CVEs