Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC2

CVE-2024-41592

CVSS 3.1
8.0 high
EPSS
1%p73
Published
·
Modified
Analyze CVE-2024-41592 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.

Vendors
draytek
Products
vigor2952 firmware, vigor2620 firmware, vigor2915 firmware, vigor2866 firmware, vigor2766 firmware, vigor2865 firmware, vigor2765 firmware, vigor2763 firmware, vigor2135 firmware, vigor166 firmware, vigor3912 firmware, vigor1000b firmware
Weakness
CWE-121
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news

3 stories