60
CVE-2024-41340
—CVSS 3.1
8.4 high
EPSS
<1%p11
Published
()
Modified
Description
An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 allows attackers to upload crafted APP Enforcement modules, leading to arbitrary code execution.
- Vendors
- draytek
- Products
- vigor165 firmware, vigor166 firmware, vigor2620 firmware, vigorlte200 firmware, vigor2860 firmware, vigor2925 firmware, vigor2862 firmware, vigor2926 firmware, vigor2133 firmware, vigor2762 firmware, vigor2832 firmware, vigor2135 firmware
- Weakness
- CWE-434
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H