CVE-2024-41596

published 2024-10-03

CVE-2024-41596: Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of…

Priority P3 41 high 8 CVSS 3.1

AV A AC L PR L UI N S U C H I H A H

Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
draytek	vigor1000b_firmware	< 4.3.2.8	4.3.2.8
draytek	vigor1000b_firmware	>= 4.4.0.0 < 4.4.3.1	4.4.3.1
draytek	vigor165_firmware	< 4.2.7	4.2.7
draytek	vigor166_firmware	< 4.2.7	4.2.7
draytek	vigor2135_firmware	< 4.4.5.3	4.4.5.3
draytek	vigor2763_firmware	< 4.4.5.3	4.4.5.3
draytek	vigor2765_firmware	< 4.4.5.3	4.4.5.3
draytek	vigor2766_firmware	< 4.4.5.3	4.4.5.3
draytek	vigor2865_firmware	< 4.4.5.2	4.4.5.2
draytek	vigor2866_firmware	< 4.4.5.2	4.4.5.2
draytek	vigor2915_firmware	< 4.4.5.3	4.4.5.3
draytek	vigor2962_firmware	< 4.3.2.8	4.3.2.8
draytek	vigor2962_firmware	>= 4.4.0.0 < 4.4.3.1	4.4.3.1
draytek	vigor3910_firmware	< 4.3.2.8	4.3.2.8
draytek	vigor3910_firmware	>= 4.4.0.0 < 4.4.3.1	4.4.3.1
draytek	vigor3912_firmware	< 4.3.6.1	4.3.6.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-120