← Database
CVE-2024-41592
HIGH
CVSS: 8.0
Published: 2024-10-03
Modified: 2026-06-17
Description
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
Affected Platforms
Draytek Vigor2763 FirmwareDraytek Vigor2926 FirmwareDraytek Vigor2952Draytek Vigor3910 FirmwareDraytek Vigorlte200 FirmwareDraytek Vigor165Draytek Vigor3910Draytek Vigor3220 FirmwareDraytek Vigorlte200Draytek Vigor2762