60
CVE-2024-41592
PoC —CVSS 3.1
8.0 high
EPSS
1%p71
Published
()
Modified
Description
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
- Vendors
- draytek
- Products
- vigor2952 firmware, vigor2620 firmware, vigor2915 firmware, vigor2866 firmware, vigor2766 firmware, vigor2865 firmware, vigor2765 firmware, vigor2763 firmware, vigor2135 firmware, vigor166 firmware, vigor3912 firmware, vigor1000b firmware
- Weakness
- CWE-121
- Vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H