The vulnerability of DrayTek Vigor router microprogramming software, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

DrayTek Vigor router firmware authentication flaw exposes protected data and harms confidentiality, integrity, and availability.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-41589	3 Oct 202421:38	–	circl
CNNVD	DrayTek Vigor 3910 安全漏洞	3 Oct 202400:00	–	cnnvd
CVE	CVE-2024-41589	3 Oct 202400:00	–	cve
Cvelist	CVE-2024-41589	3 Oct 202400:00	–	cvelist
NCSC	Vulnerabilities fixed in Draytek Vigor routers	4 Oct 202409:52	–	ncsc
NVD	CVE-2024-41589	3 Oct 202419:15	–	nvd
OSV	CVE-2024-41589	3 Oct 202419:15	–	osv
Positive Technologies	PT-2024-7432 · Draytek · Draytek Vigor310	2 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-41589	23 May 202508:52	–	redhatcve
The Hacker News	Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities	2 Oct 202413:00	–	thn

Vulners

Node

draytek vigor_1000bRange<4.3.2.8

OR

draytek vigor_1000bRange<4.4.3.1

OR

draytek vigor_3910Range<4.3.2.8

OR

draytek vigor_3910Range<4.4.3.1

OR

draytek vigor_2962Range<4.3.2.8

OR

draytek vigor_2962Range<4.4.3.1

OR

draytek vigor_3912Range<4.3.6.1

OR

draytek vigor_165Range<4.2.7

OR

draytek vigor_166Range<4.2.7

OR

draytek vigor_2915Range<4.4.5.3

OR

draytek vigor_2620Range<3.9.8.9

OR

draytek vigor_lte200Range<3.9.8.9

OR

draytek vigor_2133Range<3.9.9

OR

draytek vigor_2762Range<3.9.9

OR

draytek vigor_2832Range<3.9.9

OR

draytek vigor_2860Range<3.9.8

OR

draytek vigor_2925Range<3.9.8

OR

draytek vigor_2862Range<3.9.9.5

OR

draytek vigor_2926Range<3.9.9.5

OR

draytek vigor_2952Range<3.9.8.2

OR

draytek vigor_3220Range<3.9.8.2

OR

draytek vigor_2135Range<4.4.5.3

OR

draytek vigor_2763Range<4.4.5.3

OR

draytek vigor_2765Range<4.4.5.3

OR

draytek vigor_2766Range<4.4.5.3

OR

draytek vigor_2865Range<4.4.5.2

OR

draytek vigor_2866Range<4.4.5.2

Source	Link
forescout	www.forescout.com/resources/draybreak-draytek-research/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024100306
web	www.web.nvd.nist.gov/view/vuln/detail

31 Oct 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 28.3

CVSS 38.8

EPSS0.00067

DrayTek Vigor router firmware vulnerability authentication deficiency data confidentiality data integrity data availability