← Database

CVE-2024-41588

HIGH CVSS: 8.0 Published: 2024-10-03 Modified: 2026-06-17

Description

The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.

Affected Platforms

Draytek Vigor2763 FirmwareDraytek Vigor2926 FirmwareDraytek Vigor3910 FirmwareDraytek Vigor2952Draytek Vigorlte200 FirmwareDraytek Vigor165Draytek Vigor3910Draytek Vigor3220 FirmwareDraytek Vigorlte200Draytek Vigor2762

Weakness Type

CWE-120

References