CVE-2024-23721: Path Traversal
A Directory Traversal issue was discovered in processpost on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23721?
CVE-2024-23721 has been classified with a severity level that indicates a potential risk to the affected devices.
How do I fix CVE-2024-23721?
To mitigate CVE-2024-23721, it is recommended to apply the latest firmware update provided by Draytek for the Vigor3910 devices.
What does CVE-2024-23721 exploit?
CVE-2024-23721 exploits a Directory Traversal vulnerability that allows unauthorized access to sensitive information on Draytek Vigor3910 devices.
Which devices are affected by CVE-2024-23721?
CVE-2024-23721 specifically affects Draytek Vigor3910 devices running firmware version 4.3.2.5.
How does the attack in CVE-2024-23721 occur?
The attack involving CVE-2024-23721 occurs through a specially crafted POST request that triggers the vulnerable function in the device.