← Database

CVE-2024-41587

MEDIUM CVSS: 5.4 Published: 2024-10-03 Modified: 2026-06-17

Description

Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6.

Affected Platforms

Draytek Vigor2763 FirmwareDraytek Vigor2926 FirmwareDraytek Vigor3910 FirmwareDraytek Vigor2952Draytek Vigorlte200 FirmwareDraytek Vigor165Draytek Vigor3910Draytek Vigor3220 FirmwareDraytek Vigorlte200Draytek Vigor2762

Weakness Type

CWE-79, CWE-79

References