CVE-2024-51138
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A stack-based buffer overflow vulnerability has been found in the URL parsing functionality of the TR069 STUN server in DrayTek Vigor routers. Insufficient bounds checking on URL parameters allows a remote attacker to execute arbitrary code with elevated privileges by sending a maliciously crafted request.
Risk Assessment
An attacker can remotely take control of the vulnerable router, compromising the confidentiality, integrity, and availability of the organization's network.
Recommendation
Immediately update the firmware of affected DrayTek routers to a patched version as recommended by the vendor.
Other vulnerabilities in DrayTek Vigor
See all- CVE-2024-41340High
A vulnerability in Draytek Vigor devices allows attackers to upload crafted APP Enforcement modules, leading to arbitrary code execution. The issue affects multiple models before specific firmware versions.
- CVE-2024-41336High
Draytek Vigor devices store passwords in plaintext. This vulnerability affects multiple models and firmware versions.
- CVE-2024-41335High
Draytek Vigor devices use insecure strcmp and memcmp functions, enabling timing attacks. The vulnerability affects multiple models before specific firmware versions. Attackers can potentially obtain sensitive information by measuring response times.
- CVE-2024-41334High
Draytek Vigor devices do not verify certificates when downloading APPE modules, allowing attackers to upload crafted modules from non-official servers and achieve remote code execution.
Original NVD description (English source)
Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier; Vigor3910 4.4.3.1 and earlier a stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This flaw occurs due to insufficient bounds checking on the amount of URL parameters, allowing an attacker to exploit the overflow by sending a maliciously crafted request. Consequently, a remote attacker can execute arbitrary code with elevated privileges.