CVE-2024-41596: Buffer Overflow
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41596?
CVE-2024-41596 is classified as a high severity vulnerability due to its potential to allow remote code execution through buffer overflow.
How do I fix CVE-2024-41596?
To fix CVE-2024-41596, update the DrayTek Vigor310 device firmware to version 4.3.2.7 or later.
What devices are affected by CVE-2024-41596?
CVE-2024-41596 affects DrayTek Vigor310 devices running firmware version 4.3.2.6 or earlier.
What can exploit CVE-2024-41596?
CVE-2024-41596 can be exploited by attackers who send specially crafted CGI form parameters to the vulnerable Vigor management UI.
Is CVE-2024-41596 being actively exploited in the wild?
There is no public information indicating that CVE-2024-41596 is currently being actively exploited, but users are advised to apply the patch promptly.