VulnSocial

CVE-2024-41592(draytek / vigor1000b)

LOWCVSS 8.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.

draytek CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • vigor1000b
  • vigor1000b_firmware
  • vigor165
  • vigor165_firmware

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
draytek
Products
vigor1000bvigor1000b_firmwarevigor165vigor165_firmwarevigor166vigor166_firmwarevigor2133vigor2133_firmwarevigor2135vigor2135_firmware

1 version affected across 48 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-08: 110-08
Referenced assets1 URL
Full discourse1 post
  • SHELLCODE@sh3ll_c0d3

    🔥 CRITICAL CVSS 10.0 ON DRAYTEK ROUTERS! Pre-auth buffer overflows (CVE-2024-41592 & CVE-2024-41585) grant remote root shell execution on DrayTek Vigor enterprise routers. 👉 Full analysis: https://sh3llc0d3.com/blog/perimeter-overrun-dissecting-the-draytek-vigor-pre-auth-buffer-overflow-rce-flaws-cve-2024-41592-cve-2024-41585/ #sh3llc0d3 #shellcode #Vulnerability #DrayTek #RCE

    0000034
    114 followersView on X
CPE platform detail48 entries

48 of 48 entries

PartVendorProductVersionTarget SWTarget HW
HWdraytekvigor1000b---
OSdraytekvigor1000b_firmware---
HWdraytekvigor165---
OSdraytekvigor165_firmware---
HWdraytekvigor166---
OSdraytekvigor166_firmware---
HWdraytekvigor2133---
OSdraytekvigor2133_firmware---
HWdraytekvigor2135---
OSdraytekvigor2135_firmware---
HWdraytekvigor2620---
OSdraytekvigor2620_firmware---
HWdraytekvigor2762---
OSdraytekvigor2762_firmware---
HWdraytekvigor2763---
OSdraytekvigor2763_firmware---
HWdraytekvigor2765---
OSdraytekvigor2765_firmware---
HWdraytekvigor2766---
OSdraytekvigor2766_firmware---
HWdraytekvigor2832---
OSdraytekvigor2832_firmware---
HWdraytekvigor2860---
OSdraytekvigor2860_firmware---
HWdraytekvigor2862---
OSdraytekvigor2862_firmware---
HWdraytekvigor2865---
OSdraytekvigor2865_firmware---
HWdraytekvigor2866---
OSdraytekvigor2866_firmware---
HWdraytekvigor2915---
OSdraytekvigor2915_firmware---
HWdraytekvigor2925---
OSdraytekvigor2925_firmware---
HWdraytekvigor2926---
OSdraytekvigor2926_firmware---
HWdraytekvigor2952---
OSdraytekvigor2952_firmware---
HWdraytekvigor2962---
OSdraytekvigor2962_firmware---
HWdraytekvigor3220---
OSdraytekvigor3220_firmware---
HWdraytekvigor3910---
OSdraytekvigor3910_firmware---
HWdraytekvigor3912---
OSdraytekvigor3912_firmware---
HWdraytekvigorlte200---
OSdraytekvigorlte200_firmware---

Explore more

Back to dashboarddraytek CVEsvigor1000b vulnerabilities