CVE-2024-41589 - DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests

Back Back to CVE browser

HIGH

DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests

Published Oct 3, 2024

8.8

HIGH

CVSS 3.1

EPSS 0.32%

Description

DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.

Affected products

Vendor Draytek Product Vigor3910 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=4.3.2.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Draytek

Vigor3910 Firmware

n/a

Version	Status	Constraints
0	affected	<=4.3.2.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://www.forescout.com/resources/draybreak-draytek-research/
Third Party Advisory
https://www.forescout.com/resources/draytek14-vulnerabilities
Broken Link

Link	Providers	Tags
https://www.forescout.com/resources/draybreak-draytek-research/		Third Party Advisory
https://www.forescout.com/resources/draytek14-vulnerabilities		Broken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 3, 2024

Updated Oct 3, 2024

Reserved Jul 18, 2024

Link CVE-2024-41589

CISA Vulnrichment

Updated Oct 3, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-41589

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-41589