CVE-2024-41590

The DrayTek Vigor310 router, in versions up to 4.3.2.6 , is susceptible to a stack-based buffer overflow vulnerability in its web interface. The root cause is a missing bounds check on parameters passed through POST requests to the strcpy function across several CGI endpoints . An authenticated u...

CVE-2024-41587

Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6...