← Database

CVE-2024-41590

HIGH CVSS: 8.0 Published: 2024-10-03 Modified: 2026-06-17

Description

Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6.

Affected Platforms

Draytek Vigor2763 FirmwareDraytek Vigor2926 FirmwareDraytek Vigor3910 FirmwareDraytek Vigor2952Draytek Vigorlte200 FirmwareDraytek Vigor165Draytek Vigor3910Draytek Vigor3220 FirmwareDraytek Vigorlte200Draytek Vigor2762

Weakness Type

CWE-121

References