Login Request a demo
High severity · published Oct 3, 2024
CVE-2024-41588
The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds…
8.0
CVSS
0.3%
EPSS
No
On KEV
Description
The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VF
Vigor1000b Firmware · Draytek
before 4.3.2.8; 4.4.0.0 before 4.4.3.1 · source: NVD
VF
Vigor165 Firmware · Draytek
before 4.2.7 · source: NVD
VF
Vigor166 Firmware · Draytek
before 4.2.7 · source: NVD
VF
Vigor2133 Firmware · Draytek
All versions, or not specified · source: NVD
VF
Vigor2135 Firmware · Draytek
before 4.4.5.3 · source: NVD
VF
Vigor2620 Firmware · Draytek
All versions, or not specified · source: NVD
VF
Vigor2762 Firmware · Draytek
All versions, or not specified · source: NVD
VF
Vigor2763 Firmware · Draytek
before 4.4.5.3 · source: NVD
VF
Vigor2765 Firmware · Draytek
before 4.4.5.3 · source: NVD
VF
Vigor2766 Firmware · Draytek
before 4.4.5.3 · source: NVD
VF
Vigor2832 Firmware · Draytek
All versions, or not specified · source: NVD
VF
Vigor2860 Firmware · Draytek
All versions, or not specified · source: NVD
Affected product
VF
Vigor1000b Firmware
Draytek
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-41588
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-41588
Mitigation
https://www.forescout.com/resources/draybreak-draytek-research/
Broken Link
https://www.forescout.com/resources/draytek14-vulnerabilities
More from Vigor1000b Firmware
9.8
CVE-2024-51139
Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and…
9.8
CVE-2024-51138
Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier;…
9.8
CVE-2024-41593
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for…
9.8
CVE-2022-32548
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1
8.0
CVE-2024-41596
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form…