CVE-2024-41593: Buffer Overflow
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ftpayloaddns(), because a byte sign-extension operation occurs for the length argument of a memcpy call, leading to a heap-based Buffer Overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41593?
CVE-2024-41593 is considered a critical vulnerability due to its potential to allow remote code execution through a heap-based buffer overflow.
How do I fix CVE-2024-41593?
To mitigate CVE-2024-41593, users should update affected DrayTek Vigor310 devices to firmware version 4.3.2.7 or later.
What types of devices are affected by CVE-2024-41593?
CVE-2024-41593 affects multiple DrayTek Vigor devices, including Vigor310, Vigor3910, Vigor2962, and others running specific firmware versions.
Can CVE-2024-41593 be exploited remotely?
Yes, CVE-2024-41593 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable devices.
What are the potential impacts of CVE-2024-41593?
The potential impacts of CVE-2024-41593 include unauthorized access, data breaches, and complete system compromise on affected devices.