The vulnerability of the APP Enforcement module of the DrayTek Vigor router software allows a violator to execute arbitrary code.

🗓️ 15 Apr 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The DrayTek Vigor router APP Enforcement vulnerability in SSL certificate validation allows remote code execution.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-41334	27 Feb 202521:35	–	circl
CNNVD	DrayTek Vigor 165 代码注入漏洞	27 Feb 202500:00	–	cnnvd
CVE	CVE-2024-41334	27 Feb 202500:00	–	cve
Cvelist	CVE-2024-41334	27 Feb 202500:00	–	cvelist
EUVD	EUVD-2025-5952	3 Oct 202520:07	–	euvd
NVD	CVE-2024-41334	27 Feb 202521:15	–	nvd
OSV	CVE-2024-41334	27 Feb 202521:15	–	osv
RedhatCVE	CVE-2024-41334	1 Mar 202500:23	–	redhatcve
The Hacker News	⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact	10 Mar 202509:46	–	thn
Vulnrichment	CVE-2024-41334	27 Feb 202500:00	–	vulnrichment

Vulners

Node

draytek vigor_3910Range<4.3.2.8

OR

draytek vigor_2962Range<4.3.2.8

OR

draytek vigor_3912Range<4.3.6.1

OR

draytek vigor_165Range<4.2.7

OR

draytek vigor_166Range<4.2.7

OR

draytek vigor_2135Range<4.4.5.1

OR

draytek vigor_2765Range<4.4.5.1

OR

draytek vigor_2766Range<4.4.5.1

OR

draytek vigor_2865Range<4.4.5.3

OR

draytek vigor_2866Range<4.4.5.3

OR

draytek vigor_2133Range<3.9.9

OR

draytek vigor_2762Range<3.9.9

OR

draytek vigor_2832Range<3.9.9

OR

draytek vigor_2860Range<3.9.8

OR

draytek vigor_2925Range<3.9.8

OR

draytek vigor_2862Range<3.9.9.5

OR

draytek vigor_2952Range<3.9.8.2

OR

draytek vigor_3220Range<3.9.8.2

OR

draytek vigor_2915Range<4.4.5

OR

draytek vigor_2927Range<4.4.5.3

OR

draytek vigor2620_lteRange<3.9.8.9

OR

draytek vigor_lte_200nRange<3.9.8.9

OR

draytek vigor_2860_lteRange<3.9.8

OR

draytek vigor_2862_lteRange<3.9.9.5

OR

draytek vigor_2865_lteRange<4.4.5.3

OR

draytek vigor_2865l-5gRange<4.4.5.3

OR

draytek vigor2866_lteRange<4.4.5.3

OR

draytek vigor_2925_lteRange<3.9.8

OR

draytek vigor_2926Range<3.9.8

OR

draytek vigor_2926_lteRange<3.9.8

OR

draytek vigor_2927l-5gRange<4.4.5.3

OR

draytek vigor_2952pRange<3.9.8.2

OR

draytek vigor2927_lteRange<4.4.5.3

Source	Link
safe-surf	www.safe-surf.ru/upload/VULN-new/VULN.2025-04-09.1.pdf
draytek	www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-execution-vulnerabilities
draytek	www.draytek.com/support/knowledge-base/4695
web	www.web.nvd.nist.gov/view/vuln/detail

13 Aug 2025 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 39.8

CVSS 210

EPSS0.00136

DrayTek Vigor router App Enforcement module Certificate validation Remote code execution