CVE-2024-41596
Severity CVSS v4.0:
Pending analysis
Type:
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Publication date:
03/10/2024
Last modified:
11/06/2025
Description
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.
Impact
Base Score 3.x
8.00
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:* | ||
| cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2915_firmware:*:*:*:*:*:*:*:* | 4.4.5.3 (excluding) | |
| cpe:2.3:h:draytek:vigor2915:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:* | 4.4.5.2 (excluding) | |
| cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:* | 4.4.5.3 (excluding) | |
| cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:* | 4.4.5.2 (excluding) | |
| cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:* | 4.4.5.3 (excluding) | |
| cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:* | 4.4.5.3 (excluding) | |
| cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:* | 4.4.5.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page