CVE-2024-41592

🗓️ 03 Oct 2024 19:15:04Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

DrayTek Vigor3910 stack-based overflow in GetCGI handling query string parameter

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the GetCGI() function in the user interface of DrayTek Vigor networking device software allows a hacker to execute arbitrary code.	4 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-41592	3 Oct 202421:38	–	circl
CNNVD	DrayTek Vigor 3910 安全漏洞	3 Oct 202400:00	–	cnnvd
CVE	CVE-2024-41592	3 Oct 202400:00	–	cve
Cvelist	CVE-2024-41592	3 Oct 202400:00	–	cvelist
NCSC	Vulnerabilities fixed in Draytek Vigor routers	4 Oct 202409:52	–	ncsc
OSV	CVE-2024-41592	3 Oct 202419:15	–	osv
Positive Technologies	PT-2024-6594 · Draytek · Draytek Vigor 3910	2 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-41592	9 Jan 202609:35	–	redhatcve
The Hacker News	CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT Campaign	17 Dec 202405:47	–	thn

NVD

Node

draytek vigor2952_firmwareRange<3.9.8.2

AND

draytek vigor2952Match-

Node

draytek vigor2620_firmwareRange<3.9.8.9

AND

draytek vigor2620Match-

Node

draytek vigor2915_firmwareRange<4.4.5.3

AND

draytek vigor2915Match-

Node

draytek vigor2866_firmwareRange<4.4.5.2

AND

draytek vigor2866Match-

Node

draytek vigor2766_firmwareRange<4.4.5.3

AND

draytek vigor2766Match-

Node

draytek vigor2865_firmwareRange<4.4.5.2

AND

draytek vigor2865Match-

Node

draytek vigor2765_firmwareRange<4.4.5.3

AND

draytek vigor2765Match-

Node

draytek vigor2763_firmwareRange<4.4.5.3

AND

draytek vigor2763Match-

Node

draytek vigor2135_firmwareRange<4.4.5.3

AND

draytek vigor2135Match-

Node

draytek vigor166_firmwareRange<4.2.7

AND

draytek vigor166Match-

Node

draytek vigor3912_firmwareRange<4.3.6.1

AND

draytek vigor3912Match-

Node

draytek vigor1000b_firmwareRange<4.3.2.8

OR

draytek vigor1000b_firmwareRange4.4.0.0–4.4.3.1

AND

draytek vigor1000bMatch-

Node

draytek vigor165_firmwareRange<4.2.7

AND

draytek vigor165Match-

Node

draytek vigor3910_firmwareRange<4.3.2.8

OR

draytek vigor3910_firmwareRange4.4.0.0–4.4.3.1

AND

draytek vigor3910Match-

Node

draytek vigor2962_firmwareRange<4.3.2.8

OR

draytek vigor2962_firmwareRange4.4.0.0–4.4.3.1

AND

draytek vigor2962Match-

Node

draytek vigorlte200_firmwareRange<3.9.8.9

AND

draytek vigorlte200Match-

Node

draytek vigor2133_firmwareRange<3.9.9

AND

draytek vigor2133Match-

Node

draytek vigor2762_firmwareRange<3.9.9

AND

draytek vigor2762Match-

Node

draytek vigor2832_firmwareRange<3.9.9

AND

draytek vigor2832Match-

Node

draytek vigor2860_firmwareRange<3.9.8

AND

draytek vigor2860Match-

Node

draytek vigor2862_firmwareRange<3.9.9.5

AND

draytek vigor2862Match-

Node

draytek vigor2925_firmwareRange<3.9.8

AND

draytek vigor2925Match-

Node

draytek vigor2926_firmwareRange<3.9.9.5

AND

draytek vigor2926Match-

Node

draytek vigor3220_firmwareRange<3.9.8.2

AND

draytek vigor3220Match-

Source	Link
forescout	www.forescout.com/resources/draybreak-draytek-research/
forescout	www.forescout.com/resources/draytek14-vulnerabilities

03 Jun 2025 13:52Current

CVSS 3.18

EPSS0.01875

draytek vigor3910 stack-based overflow getcgi query string parameters security vulnerability