The vulnerability of DrayTek Vigor router microprogramming software, related to insufficiently secure data encryption, allows attackers to disclose protected information and perform a “Man-in-the-Middle” attack.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

DrayTek Vigor router firmware has weak encryption enabling remote data disclosure and MITM attacks.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-41594	3 Oct 202421:38	–	circl
CNNVD	DrayTek Vigor 3910 安全漏洞	3 Oct 202400:00	–	cnnvd
CVE	CVE-2024-41594	3 Oct 202400:00	–	cve
Cvelist	CVE-2024-41594	3 Oct 202400:00	–	cvelist
NCSC	Vulnerabilities fixed in Draytek Vigor routers	4 Oct 202409:52	–	ncsc
NVD	CVE-2024-41594	3 Oct 202419:15	–	nvd
Positive Technologies	PT-2024-7441 · Draytek +1 · Draytek Vigor310 +1	2 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-41594	23 May 202507:37	–	redhatcve
The Hacker News	Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities	2 Oct 202413:00	–	thn
Vulnrichment	CVE-2024-41594	3 Oct 202400:00	–	vulnrichment

Vulners

Node

draytek vigor_1000bRange<4.3.2.8

OR

draytek vigor_1000bRange<4.4.3.1

OR

draytek vigor_3910Range<4.3.2.8

OR

draytek vigor_3910Range<4.4.3.1

OR

draytek vigor_2962Range<4.3.2.8

OR

draytek vigor_2962Range<4.4.3.1

OR

draytek vigor_3912Range<4.3.6.1

OR

draytek vigor_165Range<4.2.7

OR

draytek vigor_166Range<4.2.7

OR

draytek vigor_2915Range<4.4.5.3

OR

draytek vigor_2620Range<3.9.8.9

OR

draytek vigor_lte200Range<3.9.8.9

OR

draytek vigor_2133Range<3.9.9

OR

draytek vigor_2762Range<3.9.9

OR

draytek vigor_2832Range<3.9.9

OR

draytek vigor_2860Range<3.9.8

OR

draytek vigor_2925Range<3.9.8

OR

draytek vigor_2862Range<3.9.9.5

OR

draytek vigor_2926Range<3.9.9.5

OR

draytek vigor_2952Range<3.9.8.2

OR

draytek vigor_3220Range<3.9.8.2

OR

draytek vigor_2135Range<4.4.5.3

OR

draytek vigor_2763Range<4.4.5.3

OR

draytek vigor_2765Range<4.4.5.3

OR

draytek vigor_2766Range<4.4.5.3

OR

draytek vigor_2865Range<4.4.5.2

OR

draytek vigor_2866Range<4.4.5.2

Source	Link
forescout	www.forescout.com/resources/draybreak-draytek-research/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024100306
web	www.web.nvd.nist.gov/view/vuln/detail

31 Oct 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 37.5

CVSS 27.8

EPSS0.00267

DrayTek Vigor router weak encryption remote data disclosure middle attack