CVE Feed

    Dashboard / CVE / CVE-2024-41334

    CVE-2024-41334

    Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 were discovered to not utilize certificate verification, allowing attackers to upload crafted APPE modules from non-official servers, leading to arbitrary code execution.

    Published:Feb 27, 2025
    Last Modified:Jun 3, 2025
    EPS:Feb 27, 2025
    EPSS Score:0.00071
    CVSS Score:8.8

    Affected Products

    Vendor
    Draytek
    Product
    Vigor165
    Vendor
    Draytek
    Product
    Vigor165 Firmware
    Vendor
    Draytek
    Product
    Vigor166
    Vendor
    Draytek
    Product
    Vigor166 Firmware
    Vendor
    Draytek
    Product
    Vigor2133
    Vendor
    Draytek
    Product
    Vigor2133 Firmware
    Vendor
    Draytek
    Product
    Vigor2135
    Vendor
    Draytek
    Product
    Vigor2135 Firmware
    Vendor
    Draytek
    Product
    Vigor2620
    Vendor
    Draytek
    Product
    Vigor2620 Firmware
    Vendor
    Draytek
    Product
    Vigor2762
    Vendor
    Draytek
    Product
    Vigor2762 Firmware
    Vendor
    Draytek
    Product
    Vigor2765
    Vendor
    Draytek
    Product
    Vigor2765 Firmware
    Vendor
    Draytek
    Product
    Vigor2766
    Vendor
    Draytek
    Product
    Vigor2766 Firmware
    Vendor
    Draytek
    Product
    Vigor2832
    Vendor
    Draytek
    Product
    Vigor2832 Firmware
    Vendor
    Draytek
    Product
    Vigor2860
    Vendor
    Draytek
    Product
    Vigor2860 Firmware
    Vendor
    Draytek
    Product
    Vigor2862
    Vendor
    Draytek
    Product
    Vigor2862 Firmware
    Vendor
    Draytek
    Product
    Vigor2865
    Vendor
    Draytek
    Product
    Vigor2865 Firmware
    Vendor
    Draytek
    Product
    Vigor2866
    Vendor
    Draytek
    Product
    Vigor2866 Firmware
    Vendor
    Draytek
    Product
    Vigor2925
    Vendor
    Draytek
    Product
    Vigor2925 Firmware
    Vendor
    Draytek
    Product
    Vigor2926
    Vendor
    Draytek
    Product
    Vigor2926 Firmware
    Vendor
    Draytek
    Product
    Vigor2927
    Vendor
    Draytek
    Product
    Vigor2927 Firmware
    Vendor
    Draytek
    Product
    Vigor2962
    Vendor
    Draytek
    Product
    Vigor2962 Firmware
    Vendor
    Draytek
    Product
    Vigor3910
    Vendor
    Draytek
    Product
    Vigor3910 Firmware
    Vendor
    Draytek
    Product
    Vigor3912
    Vendor
    Draytek
    Product
    Vigor3912 Firmware
    Vendor
    Draytek
    Product
    Vigorlte200
    Vendor
    Draytek
    Product
    Vigorlte200 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Related CVEs

    CVE-2024-41338 (CVSS 7.5) — A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.…
    CVE-2024-41339 (CVSS 8.8) — An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , …
    CVE-2024-41340 (CVSS 8.4) — An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/29…
    CVE-2024-41590 (CVSS 8) — Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds ch…
    CVE-2024-41593 (CVSS 9.8) — DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft…
    CVE-2024-41594 (CVSS 7.5) — An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information becaus…
    CVE-2024-41596 (CVSS 8) — Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI)…
    CVE-2024-41587 (CVSS 5.4) — Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayT…
    CVE-2024-41588 (CVSS 8) — The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buff…
    CVE-2024-41591 (CVSS 6.1) — DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High