CVE-2024-41335
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Draytek Vigor devices use insecure strcmp and memcmp functions, enabling timing attacks. The vulnerability affects multiple models before specific firmware versions. Attackers can potentially obtain sensitive information by measuring response times.
Risk Assessment
The risk involves potential leakage of confidential data such as passwords or cryptographic keys through timing attacks. This could lead to network security breaches and access to critical resources.
Recommendation
Immediately update Draytek Vigor firmware to the latest versions specified in the vulnerability description. Consider implementing additional protections against timing attacks.
Other vulnerabilities in Draytek Vigor
See all- CVE-2024-51138Critical
A stack-based buffer overflow vulnerability has been found in the URL parsing functionality of the TR069 STUN server in DrayTek Vigor routers. Insufficient bounds checking on URL parameters allows a remote attacker to execute arbitrary code with elevated privileges by sending a maliciously crafted request.
- CVE-2024-41340High
A vulnerability in Draytek Vigor devices allows attackers to upload crafted APP Enforcement modules, leading to arbitrary code execution. The issue affects multiple models before specific firmware versions.
- CVE-2024-41336High
Draytek Vigor devices store passwords in plaintext. This vulnerability affects multiple models and firmware versions.
- CVE-2024-41334High
Draytek Vigor devices do not verify certificates when downloading APPE modules, allowing attackers to upload crafted modules from non-official servers and achieve remote code execution.
Original NVD description (English source)
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 were discovered to utilize insecure versions of the functions strcmp and memcmp, allowing attackers to possibly obtain sensitive information via timing attacks.