← Database

CVE-2024-41591

MEDIUM CVSS: 6.1 Published: 2024-10-03 Modified: 2026-06-17

Description

DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.

Affected Platforms

Draytek Vigor2763 FirmwareDraytek Vigor2926 FirmwareDraytek Vigor3910 FirmwareDraytek Vigor2952Draytek Vigorlte200 FirmwareDraytek Vigor165Draytek Vigor3910Draytek Vigor3220 FirmwareDraytek Vigorlte200Draytek Vigor2762

Weakness Type

CWE-79, CWE-79

References