CVE Feed

    Dashboard / CVE / CVE-2024-41592

    CVE-2024-41592

    DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.

    Published:Oct 3, 2024
    Last Modified:Jun 3, 2025
    EPS:Oct 3, 2024
    EPSS Score:0.01189
    CVSS Score:8

    Affected Products

    Vendor
    Draytek
    Product
    Vigor1000b
    Vendor
    Draytek
    Product
    Vigor1000b Firmware
    Vendor
    Draytek
    Product
    Vigor165
    Vendor
    Draytek
    Product
    Vigor165 Firmware
    Vendor
    Draytek
    Product
    Vigor166
    Vendor
    Draytek
    Product
    Vigor166 Firmware
    Vendor
    Draytek
    Product
    Vigor2133
    Vendor
    Draytek
    Product
    Vigor2133 Firmware
    Vendor
    Draytek
    Product
    Vigor2135
    Vendor
    Draytek
    Product
    Vigor2135 Firmware
    Vendor
    Draytek
    Product
    Vigor2620
    Vendor
    Draytek
    Product
    Vigor2620 Firmware
    Vendor
    Draytek
    Product
    Vigor2762
    Vendor
    Draytek
    Product
    Vigor2762 Firmware
    Vendor
    Draytek
    Product
    Vigor2763
    Vendor
    Draytek
    Product
    Vigor2763 Firmware
    Vendor
    Draytek
    Product
    Vigor2765
    Vendor
    Draytek
    Product
    Vigor2765 Firmware
    Vendor
    Draytek
    Product
    Vigor2766
    Vendor
    Draytek
    Product
    Vigor2766 Firmware
    Vendor
    Draytek
    Product
    Vigor2832
    Vendor
    Draytek
    Product
    Vigor2832 Firmware
    Vendor
    Draytek
    Product
    Vigor2860
    Vendor
    Draytek
    Product
    Vigor2860 Firmware
    Vendor
    Draytek
    Product
    Vigor2862
    Vendor
    Draytek
    Product
    Vigor2862 Firmware
    Vendor
    Draytek
    Product
    Vigor2865
    Vendor
    Draytek
    Product
    Vigor2865 Firmware
    Vendor
    Draytek
    Product
    Vigor2866
    Vendor
    Draytek
    Product
    Vigor2866 Firmware
    Vendor
    Draytek
    Product
    Vigor2915
    Vendor
    Draytek
    Product
    Vigor2915 Firmware
    Vendor
    Draytek
    Product
    Vigor2925
    Vendor
    Draytek
    Product
    Vigor2925 Firmware
    Vendor
    Draytek
    Product
    Vigor2926
    Vendor
    Draytek
    Product
    Vigor2926 Firmware
    Vendor
    Draytek
    Product
    Vigor2952
    Vendor
    Draytek
    Product
    Vigor2952 Firmware
    Vendor
    Draytek
    Product
    Vigor2962
    Vendor
    Draytek
    Product
    Vigor2962 Firmware
    Vendor
    Draytek
    Product
    Vigor3220
    Vendor
    Draytek
    Product
    Vigor3220 Firmware
    Vendor
    Draytek
    Product
    Vigor3910
    Vendor
    Draytek
    Product
    Vigor3910 Firmware
    Vendor
    Draytek
    Product
    Vigor3912
    Vendor
    Draytek
    Product
    Vigor3912 Firmware
    Vendor
    Draytek
    Product
    Vigorlte200
    Vendor
    Draytek
    Product
    Vigorlte200 Firmware

    Exploits

    https://www.forescout.com/resources/draybreak-draytek-research/

    Common Weakness Enumeration

    CWE-121 Stack-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-10547 (CVSS 9.8) — An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running Dray…
    CVE-2024-51138 (CVSS 9.8) — Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2…
    CVE-2024-51139 (CVSS 9.8) — Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and…
    CVE-2024-41588 (CVSS 8) — The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buff…
    CVE-2024-41591 (CVSS 6.1) — DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.…
    CVE-2024-41593 (CVSS 9.8) — DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft…
    CVE-2024-41594 (CVSS 7.5) — An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information becaus…
    CVE-2024-41590 (CVSS 8) — Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds ch…
    CVE-2024-41596 (CVSS 8) — Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI)…
    CVE-2024-41587 (CVSS 5.4) — Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayT…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High