CVE-2024-41340

Several DrayTek Vigor router models are vulnerable to arbitrary code execution due to a flaw in the APPE Signature Upgrade microprogramming software. The root cause is an unrestricted upload of crafted APP Enforcement modules , which allows for the loading of malicious files. Affected products in...