VF
Product
Vigor2915 Firmware
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 2Low 0
Watch
Add Vigor2915 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-41596 | 8.0 | Oct 3 | Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form… Affected: before 4.4.5.3 |
| CVE-2024-41592 | 8.0 | Oct 3 | DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long… Affected: before 4.4.5.3 |
| CVE-2024-41590 | 8.0 | Oct 3 | Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy… Affected: before 4.4.5.3 |
| CVE-2024-41588 | 8.0 | Oct 3 | The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds… Affected: before 4.4.5.3 |
| CVE-2024-41594 | 7.5 | Oct 3 | An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string… Affected: before 4.4.5.3 |
Showing 5