CVE-2024-51139

🗓️ 27 Feb 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 304 Views🌐 WEB

Buffer Overflow in multiple Vigor routers allows remote code execution via HTTP POST requests.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-51139	27 Feb 202521:35	–	circl
CNNVD	DrayTek Vigor 165 security vulnerabilities	27 Feb 202500:00	–	cnnvd
Cvelist	CVE-2024-51139	27 Feb 202500:00	–	cvelist
EUVD	EUVD-2025-5949	3 Oct 202520:07	–	euvd
NVD	CVE-2024-51139	27 Feb 202521:15	–	nvd
osv_cve	CVE-2024-51139	27 Feb 202521:15	–	osv_cve
Positive Technologies	PT-2025-9025	27 Feb 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-51139: Buffer Copy without Checking Size of Input	27 Feb 202500:00	–	rapid7
RedhatCVE	CVE-2024-51139	1 Mar 202500:20	–	redhatcve
The Hacker News	⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact	10 Mar 202509:46	–	thn

NVD

Node

AND

draytek vigor2620_firmwareRange<3.9.9.1

draytek vigor2620Match-

Node

AND

draytek vigorlte200_firmwareRange<3.9.9.1

draytek vigorlte200Match-

Node

AND

draytek vigor2860_firmwareRange<3.9.8.3

draytek vigor2860Match-

Node

AND

draytek vigor2925_firmwareRange<3.9.8.3

draytek vigor2925Match-

Node

AND

draytek vigor2862_firmwareRange<3.9.9.8

draytek vigor2862Match-

Node

AND

draytek vigor2926_firmwareRange<3.9.9.8

draytek vigor2926Match-

Node

AND

draytek vigor2133_firmwareRange<3.9.9.2

draytek vigor2133Match-

Node

AND

draytek vigor2762_firmwareRange<3.9.9.2

draytek vigor2762Match-

Node

AND

draytek vigor2832_firmwareRange<3.9.9.2

draytek vigor2832Match-

Node

AND

draytek vigor2135_firmwareRange<4.4.5.5

draytek vigor2135Match-

Node

AND

draytek vigor2765_firmwareRange<4.4.5.5

draytek vigor2765Match-

Node

AND

draytek vigor2766_firmwareRange<4.4.5.5

draytek vigor2766Match-

Node

AND

draytek vigor2763_firmwareRange<4.4.5.5

draytek vigor2763Match-

Node

AND

draytek vigor2865_firmwareRange<4.4.5.8

draytek vigor2865Match-

Node

AND

draytek vigor2866_firmwareRange<4.4.5.8

draytek vigor2866Match-

Node

AND

draytek vigor2927_firmwareRange<4.4.5.8

draytek vigor2927Match-

Node

AND

OR

draytek vigor2962_firmwareRange<4.3.2.9

draytek vigor2962_firmwareRange4.4.3–4.4.3.2

draytek vigor2962Match-

Node

AND

OR

draytek vigor3910_firmwareRange<4.3.2.9

draytek vigor3910_firmwareRange4.4.3–4.4.3.2

draytek vigor3910Match-

Node

AND

draytek vigor3912_firmwareRange<4.4.3.2

draytek vigor3912Match-

Node

AND

draytek vigor2915_firmwareRange<4.4.5

draytek vigor2915Match-

Node

AND

draytek vigor1000b_firmwareRange<4.4.3.2

draytek vigor1000bMatch-

Node

AND

draytek vigor2952_firmwareRange<3.9.8.5

draytek vigor2952Match-

Node

AND

draytek vigor3220_firmwareRange<3.9.8.5

draytek vigor3220Match-

Source	Link
medium	www.medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946

Parameter	Position	Path	Description	CWE
Content-Length	header	/	A buffer overflow vulnerability exists in the CGI parser when handling the 'Content-Length' header of HTTP POST requests.	CWE-120

05 Jul 2026 01:21Current

9.2Critical risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.00995

SSVC

cve-2024-51139 buffer overflow remote code execution vigor routers http post requests