CVE-2024-41596 - Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters

Back Back to CVE browser

HIGH

Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters

Published Oct 3, 2024

8.0

HIGH

CVSS 3.1

EPSS 0.33%

Description

Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.

Affected products

Vendor Draytek Product Vigor3910 Firmware Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=4.3.2.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Draytek

Vigor3910 Firmware

n/a

Version	Status	Constraints
0	affected	<=4.3.2.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

https://www.forescout.com/resources/draybreak-draytek-research/
MitigationTechnical DescriptionThird Party Advisory
https://www.forescout.com/resources/draytek14-vulnerabilities
Broken Link

Link	Providers	Tags
https://www.forescout.com/resources/draybreak-draytek-research/		MitigationTechnical DescriptionThird Party Advisory
https://www.forescout.com/resources/draytek14-vulnerabilities		Broken Link