Risk | High |
Patch available | YES |
Number of vulnerabilities | 6 |
CVE-ID | CVE-2024-41334 CVE-2024-41339 CVE-2024-41335 CVE-2024-41336 CVE-2024-41338 CVE-2024-41340 |
CWE-ID | CWE-295 CWE-94 CWE-203 CWE-256 CWE-476 CWE-434 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software |
Vigor165 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor166 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2620 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc VigorLTE 200n Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2133 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2135 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2762 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2765 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2766 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2832 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2860 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2860 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2862 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2862 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2865 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2865 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2865L-5G Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2866 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2866 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2915 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2925 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2925 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2926 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2926 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2927 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2927L-5G Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2952 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2952P Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2927 LTE Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor2962 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor3220 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor3910 Hardware solutions / Routers & switches, VoIP, GSM, etc Vigor3912 Hardware solutions / Routers & switches, VoIP, GSM, etc |
Vendor | DrayTek Corp. |
Security Bulletin
This security bulletin contains information about 6 vulnerabilities.
EUVDB-ID: #VU106351
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2024-41334
CWE-ID:
CWE-295 - Improper Certificate Validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to missing SSL certificate validation for APP Enforcement signature updates. A remote attacker can install specially crafted APPE modules from unofficial servers and execute arbitrary code on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsVigor165: before 4.2.7
Vigor166: before 4.2.7
Vigor2620 LTE: before 3.9.8.9
VigorLTE 200n: before 3.9.8.9
Vigor2133: before 3.9.9
Vigor2135: before 4.4.5.1
Vigor2762: before 3.9.9
Vigor2765: before 4.4.5.1
Vigor2766: before 4.4.5.1
Vigor2832: before 3.9.9
Vigor2860: before 3.9.8
Vigor2860 LTE: before 3.9.8
Vigor2862: before 3.9.9.5
Vigor2862 LTE: before 3.9.9.5
Vigor2865: before 4.4.5.3
Vigor2865 LTE: before 4.4.5.3
Vigor2865L-5G: before 4.4.5.3
Vigor2866: before 4.4.5.3
Vigor2866 LTE: before 4.4.5.3
Vigor2915: before 4.4.5
Vigor2925: before 3.9.8
Vigor2925 LTE: before 3.9.8
Vigor2926: before 3.9.8
Vigor2926 LTE: before 3.9.8
Vigor2927: before 4.4.5.3
Vigor2927L-5G: before 4.4.5.3
Vigor2952: before 3.9.8.2
Vigor2952P: before 3.9.8.2
Vigor2927 LTE: before 4.4.5.3
Vigor2962: before 4.3.2.8
Vigor3220: before 3.9.8.2
Vigor3910: before 4.3.2.8
Vigor3912: before 4.3.6.1
CPE2.3https://draytek.com
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946
https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-execution-vulnerabilities
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU106352
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2024-41339
CWE-ID:
CWE-94 - Improper Control of Generation of Code ('Code Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to undocumented kernel module installation through CGI configuration endpoint. A remote attacker can execute arbitrary code on the target system.
MitigationInstall update from vendor's website.
Vulnerable software versionsVigor165: before 4.2.7
Vigor166: before 4.2.7
Vigor2620 LTE: before 3.9.8.9
VigorLTE 200n: before 3.9.8.9
Vigor2133: before 3.9.9
Vigor2135: before 4.4.5.1
Vigor2762: before 3.9.9
Vigor2765: before 4.4.5.1
Vigor2766: before 4.4.5.1
Vigor2832: before 3.9.9
Vigor2860: before 3.9.8
Vigor2860 LTE: before 3.9.8
Vigor2862: before 3.9.9.5
Vigor2862 LTE: before 3.9.9.5
Vigor2865: before 4.4.5.3
Vigor2865 LTE: before 4.4.5.3
Vigor2865L-5G: before 4.4.5.3
Vigor2866: before 4.4.5.3
Vigor2866 LTE: before 4.4.5.3
Vigor2915: before 4.4.5
Vigor2925: before 3.9.8
Vigor2925 LTE: before 3.9.8
Vigor2926: before 3.9.8
Vigor2926 LTE: before 3.9.8
Vigor2927: before 4.4.5.3
Vigor2927L-5G: before 4.4.5.3
Vigor2952: before 3.9.8.2
Vigor2952P: before 3.9.8.2
Vigor2927 LTE: before 4.4.5.3
Vigor2962: before 4.3.2.8
Vigor3220: before 3.9.8.2
Vigor3910: before 4.3.2.8
Vigor3912: before 4.3.6.1
CPE2.3https://draytek.com
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946
https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-...
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU106353
Risk: High
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2024-41335
CWE-ID:
CWE-203 - Observable discrepancy
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the affected products utilize insecure versions of the functions strcmp and memcmp to compare credentials. A remote attacker can gain unauthorized access to sensitive information on the system.
MitigationInstall update from vendor's website.
Vulnerable software versionsVigor165: before 4.2.7
Vigor166: before 4.2.7
Vigor2620 LTE: before 3.9.8.9
VigorLTE 200n: before 3.9.8.9
Vigor2133: before 3.9.9
Vigor2135: before 4.4.5.1
Vigor2762: before 3.9.9
Vigor2765: before 4.4.5.1
Vigor2766: before 4.4.5.1
Vigor2832: before 3.9.9
Vigor2860: before 3.9.8
Vigor2860 LTE: before 3.9.8
Vigor2862: before 3.9.9.5
Vigor2862 LTE: before 3.9.9.5
Vigor2865: before 4.4.5.3
Vigor2865 LTE: before 4.4.5.3
Vigor2865L-5G: before 4.4.5.3
Vigor2866: before 4.4.5.3
Vigor2866 LTE: before 4.4.5.3
Vigor2915: before 4.4.5
Vigor2925: before 3.9.8
Vigor2925 LTE: before 3.9.8
Vigor2926: before 3.9.8
Vigor2926 LTE: before 3.9.8
Vigor2927: before 4.4.5.3
Vigor2927L-5G: before 4.4.5.3
Vigor2952: before 3.9.8.2
Vigor2952P: before 3.9.8.2
Vigor2927 LTE: before 4.4.5.3
Vigor2962: before 4.3.2.8
Vigor3220: before 3.9.8.2
Vigor3910: before 4.3.2.8
Vigor3912: before 4.3.6.1
CPE2.3https://draytek.com
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946
https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-...
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU106354
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-41336
CWE-ID:
CWE-256 - Unprotected Storage of Credentials
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to gain access to sensitive information.
The vulnerability exists due to application stored credentials in plain text. An attacker with physical access can dump credentials.
MitigationInstall update from vendor's website.
Vulnerable software versionsVigor165: before 4.2.7
Vigor166: before 4.2.7
Vigor2620 LTE: before 3.9.8.9
VigorLTE 200n: before 3.9.8.9
Vigor2133: before 3.9.9
Vigor2135: before 4.4.5.1
Vigor2762: before 3.9.9
Vigor2765: before 4.4.5.1
Vigor2766: before 4.4.5.1
Vigor2832: before 3.9.9
Vigor2860: before 3.9.8
Vigor2860 LTE: before 3.9.8
Vigor2862: before 3.9.9.5
Vigor2862 LTE: before 3.9.9.5
Vigor2865: before 4.4.5.3
Vigor2865 LTE: before 4.4.5.3
Vigor2865L-5G: before 4.4.5.3
Vigor2866: before 4.4.5.3
Vigor2866 LTE: before 4.4.5.3
Vigor2915: before 4.4.5
Vigor2925: before 3.9.8
Vigor2925 LTE: before 3.9.8
Vigor2926: before 3.9.8
Vigor2926 LTE: before 3.9.8
Vigor2927: before 4.4.5.3
Vigor2927L-5G: before 4.4.5.3
Vigor2952: before 3.9.8.2
Vigor2952P: before 3.9.8.2
Vigor2927 LTE: before 4.4.5.3
Vigor2962: before 4.3.2.8
Vigor3220: before 3.9.8.2
Vigor3910: before 4.3.2.8
Vigor3912: before 4.3.6.1
CPE2.3https://draytek.com
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946
https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-...
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU106355
Risk: High
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2024-41338
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error. A remote attacker can send a specially crafted DHCP request and perform a denial of service (DoS) attack.
MitigationInstall update from vendor's website.
Vulnerable software versionsVigor165: before 4.2.7
Vigor166: before 4.2.7
Vigor2620 LTE: before 3.9.8.9
VigorLTE 200n: before 3.9.8.9
Vigor2133: before 3.9.9
Vigor2135: before 4.4.5.1
Vigor2762: before 3.9.9
Vigor2765: before 4.4.5.1
Vigor2766: before 4.4.5.1
Vigor2832: before 3.9.9
Vigor2860: before 3.9.8
Vigor2860 LTE: before 3.9.8
Vigor2862: before 3.9.9.5
Vigor2862 LTE: before 3.9.9.5
Vigor2865: before 4.4.5.3
Vigor2865 LTE: before 4.4.5.3
Vigor2865L-5G: before 4.4.5.3
Vigor2866: before 4.4.5.3
Vigor2866 LTE: before 4.4.5.3
Vigor2915: before 4.4.5
Vigor2925: before 3.9.8
Vigor2925 LTE: before 3.9.8
Vigor2926: before 3.9.8
Vigor2926 LTE: before 3.9.8
Vigor2927: before 4.4.5.3
Vigor2927L-5G: before 4.4.5.3
Vigor2952: before 3.9.8.2
Vigor2952P: before 3.9.8.2
Vigor2927 LTE: before 4.4.5.3
Vigor2962: before 4.3.2.8
Vigor3220: before 3.9.8.2
Vigor3910: before 4.3.2.8
Vigor3912: before 4.3.6.1
CPE2.3https://draytek.com
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946
https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-...
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU106357
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2024-41340
CWE-ID:
CWE-434 - Unrestricted Upload of File with Dangerous Type
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to insufficient validation of file during file upload. A remote attacker can upload specially crafted APP Enforcement modules and execute arbitrary code on the system.
MitigationInstall update from vendor's website.
Vulnerable software versionsVigor165: before 4.2.7
Vigor166: before 4.2.7
Vigor2620 LTE: before 3.9.8.9
VigorLTE 200n: before 3.9.8.9
Vigor2133: before 3.9.9
Vigor2135: before 4.4.5.1
Vigor2762: before 3.9.9
Vigor2765: before 4.4.5.1
Vigor2766: before 4.4.5.1
Vigor2832: before 3.9.9
Vigor2860: before 3.9.8
Vigor2860 LTE: before 3.9.8
Vigor2862: before 3.9.9.5
Vigor2862 LTE: before 3.9.9.5
Vigor2865: before 4.4.5.3
Vigor2865 LTE: before 4.4.5.3
Vigor2865L-5G: before 4.4.5.3
Vigor2866: before 4.4.5.3
Vigor2866 LTE: before 4.4.5.3
Vigor2915: before 4.4.5
Vigor2925: before 3.9.8
Vigor2925 LTE: before 3.9.8
Vigor2926: before 3.9.8
Vigor2926 LTE: before 3.9.8
Vigor2927: before 4.4.5.3
Vigor2927L-5G: before 4.4.5.3
Vigor2952: before 3.9.8.2
Vigor2952P: before 3.9.8.2
Vigor2927 LTE: before 4.4.5.3
Vigor2962: before 4.3.2.8
Vigor3220: before 3.9.8.2
Vigor3910: before 4.3.2.8
Vigor3912: before 4.3.6.1
CPE2.3https://draytek.com
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946
https://www.draytek.com/about/security-advisory/denial-of-service,-information-disclosure,-and-code-...
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.