CVE-2024-41586

CVE-2024-41586 affects DrayTek Vigor310 devices (through 4.3.2.6). The flaw is a stack-based buffer overflow in the Web UI CGI component /cgi-bin/ipfedr.cgi exploited by a long query string, enabling a remote attacker to execute arbitrary code. Public documentation confirms the affected product a...