CVE-2024-41338

A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to...

CVE-2024-41338

CVE-2024-41338 describes a NULL pointer dereference in DrayTek Vigor devices that allows a Denial of Service (DoS) when handling crafted DHCP requests. Affected devices and minimum vulnerable/patch versions include: Vigor 165/166 prior to 4.2.6; 2620/LTE200 prior to 3.9.8.8; 2860/2925 prior to 3....

DrayTek Vigor 165 代码注入漏洞

The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China Juyi DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that originates from an unvalidated certificate and could lead to arbitrary code execution...

CVE-2024-41339

The CVE-2024-41339 entry concerns DrayTek Vigor routers where the CGI endpoint used to upload configurations allows uploading a crafted kernel module, enabling arbitrary code execution. Affected are multiple models and firmware ranges (e.g., Vigor 165/166 before 4.2.6; 2620/LTE200 before 3.9.8.8;...

CVE-2024-41335

CVE-2024-41335 affects DrayTek Vigor routers (multiple models) with vulnerable firmware versions that use insecure implementations of strcmp and memcmp. The root cause is timing-based information disclosure via these insecure comparisons, which may allow attackers to obtain sensitive data. Affect...

CVE-2024-41336

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to...

PT-2025-9021

Name of the Vulnerable Software and Affected Versions Draytek Vigor 165/166 versions prior to 4.2.6 Draytek Vigor 2620/LTE200 versions prior to 3.9.8.8 Draytek Vigor 2860/2925 versions prior to 3.9.7 Draytek Vigor 2862/2926 versions prior to 3.9.9.4 Draytek Vigor 2133/2762/2832 versions prior to...

CVE-2024-41339

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigo...

CVE-2024-41336

The CVE affects DrayTek Vigor routers where passwords were stored in plaintext. Affected models and fixed versions include: Vigor 165/166 prior to v4.2.6; Vigor 2620/LTE200 prior to v3.9.8.8; Vigor 2860/2925 prior to v3.9.7; Vigor 2862/2926 prior to v3.9.9.4; Vigor 2133/2762/2832 prior to v3.9.8;...

CVE-2024-41335

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to...

DrayTek Vigor 165 代码注入漏洞

The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China Juyi DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that stems from an improperly uploaded CGI endpoint configuration that could lead to arbitrary code execution...

CVE-2024-41334

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to...

CVE-2024-41340

An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/391...

DrayTek Vigor 165 安全漏洞

The DrayTek Vigor 165 is a VDSL2 35b super vector modem/router from DrayTek China. A security vulnerability exists in the DrayTek Vigor 165 that originates from a buffer overflow when processing the Content-Length header of an HTTP POST request, which allows remote attackers to execute arbitrary...

DrayTek Vigor 165 代码问题漏洞

The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China Juyi DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that originates from the upload of a specially crafted APP Enforcement module, which could lead to arbitrary code execution...

DrayTek Vigor 165 代码问题漏洞

The DrayTek Vigor 165 is a VDSL2 35b hypervector modem/router from China Juyi DrayTek. A security vulnerability exists in the DrayTek Vigor 165 that stems from a null pointer dereference that could lead to a denial of service...

CVE-2024-41339

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigo...

CVE-2024-41338

A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to...

PT-2025-9022

Name of the Vulnerable Software and Affected Versions Draytek Vigor 165/166 versions prior to 4.2.6 Draytek Vigor 2620/LTE200 versions prior to 3.9.8.8 Draytek Vigor 2860/2925 versions prior to 3.9.7 Draytek Vigor 2862/2926 versions prior to 3.9.9.4 Draytek Vigor 2133/2762/2832 versions prior to...

CVE-2024-41340

The CVE-2024-41340 issue affects multiple Draytek Vigor devices, where an attacker can upload crafted APP Enforcement modules, leading to arbitrary code execution. Affected models and minimum patched versions include: Vigor 165/166 before 4.2.6 (update to 4.2.6+), Vigor 2620/LTE200 before 3.9.8.8...