CVE-2024-41596

· HIGHAnalyzed

← All CVEs

CVSS v3.1

8.0

EPSS

0.33%

Published

Oct 3, 2024

Modified

Jun 11, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-120

Affected Products (51)

draytek · vigor2620_firmwarevulnerable

draytek · vigor2620

draytek · vigor2915_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2915

draytek · vigor2866_firmware (up to 4.4.5.2)vulnerable

draytek · vigor2866

draytek · vigor2766_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2766

draytek · vigor2865_firmware (up to 4.4.5.2)vulnerable

draytek · vigor2865

draytek · vigor2765_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2765

draytek · vigor2763_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2763

draytek · vigor2135_firmware (up to 4.4.5.3)vulnerable

draytek · vigor2135

draytek · vigor166_firmware (up to 4.2.7)vulnerable

draytek · vigor166

draytek · vigor3912_firmware (up to 4.3.6.1)vulnerable

draytek · vigor3912

draytek · vigor1000b_firmware (up to 4.3.2.8)vulnerable

draytek · vigor1000b_firmware (up to 4.4.3.1)vulnerable

draytek · vigor1000b

draytek · vigor165_firmware (up to 4.2.7)vulnerable

draytek · vigor165

draytek · vigor3910_firmware (up to 4.3.2.8)vulnerable

draytek · vigor3910_firmware (up to 4.4.3.1)vulnerable

draytek · vigor3910

draytek · vigor2962_firmware (up to 4.3.2.8)vulnerable

draytek · vigor2962_firmware (up to 4.4.3.1)vulnerable

draytek · vigor2962

draytek · vigorlte200_firmwarevulnerable

draytek · vigorlte200

draytek · vigor2133_firmwarevulnerable

draytek · vigor2133

draytek · vigor2762_firmwarevulnerable

draytek · vigor2762

draytek · vigor2832_firmwarevulnerable

draytek · vigor2832

draytek · vigor2860_firmwarevulnerable

draytek · vigor2860

draytek · vigor2862_firmwarevulnerable

draytek · vigor2862

draytek · vigor2925_firmwarevulnerable

draytek · vigor2925

draytek · vigor2926_firmwarevulnerable

draytek · vigor2926

draytek · vigor2952_firmwarevulnerable

draytek · vigor2952

draytek · vigor3220_firmwarevulnerable

...and 1 more

References (2)

https://www.forescout.com/resources/draybreak-draytek-research/

MitigationTechnical DescriptionThird Party Advisory

https://www.forescout.com/resources/draytek14-vulnerabilities

Broken Link

KEV Catalog EPSS Scores Vendors All CVEs