Secuno
ENNL
Book demo

CVE-2024-41593

Draytek Vigor1000b Firmware remote code execution

9.8 CRITICALEPSS 0.89%
  1. Published3 Oct 2024

Description

DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Draytek Vigor1000b Firmware≥ 4.4.0.0 < 4.4.3.1 · < 4.3.2.8
Draytek Vigor165 Firmware< 4.2.7
Draytek Vigor166 Firmware< 4.2.7
Draytek Vigor2133 Firmwareall versions
Draytek Vigor2135 Firmware< 4.4.5.3
Draytek Vigor2620 Firmwareall versions
Draytek Vigor2762 Firmwareall versions
Draytek Vigor2763 Firmware< 4.4.5.3
Draytek Vigor2765 Firmware< 4.4.5.3
Draytek Vigor2766 Firmware< 4.4.5.3
Draytek Vigor2832 Firmwareall versions
Draytek Vigor2860 Firmwareall versions
Draytek Vigor2862 Firmwareall versions
Draytek Vigor2865 Firmware< 4.4.5.2
Draytek Vigor2866 Firmware< 4.4.5.2
Draytek Vigor2915 Firmware< 4.4.5.3
Draytek Vigor2925 Firmwareall versions
Draytek Vigor2926 Firmwareall versions
Draytek Vigor2952 Firmwareall versions
Draytek Vigor2962 Firmware≥ 4.4.0.0 < 4.4.3.1 · < 4.3.2.8
Draytek Vigor3220 Firmwareall versions
Draytek Vigor3910 Firmware≥ 4.4.0.0 < 4.4.3.1 · < 4.3.2.8
Draytek Vigor3912 Firmware< 4.3.6.1
Draytek Vigorlte200 Firmwareall versions

Remediation

Fixed in
Draytek Vigor1000b Firmware≥ 4.4.3.1
Draytek Vigor165 Firmware≥ 4.2.7
Draytek Vigor166 Firmware≥ 4.2.7
Draytek Vigor2135 Firmware≥ 4.4.5.3
Draytek Vigor2763 Firmware≥ 4.4.5.3
Draytek Vigor2765 Firmware≥ 4.4.5.3
Draytek Vigor2766 Firmware≥ 4.4.5.3
Draytek Vigor2865 Firmware≥ 4.4.5.2
Draytek Vigor2866 Firmware≥ 4.4.5.2
Draytek Vigor2915 Firmware≥ 4.4.5.3

Frequently asked

Is CVE-2024-41593 being actively exploited?

CVE-2024-41593 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.89%.

How severe is CVE-2024-41593?

CVE-2024-41593 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 0.89% probability of exploitation.

Which products are affected by CVE-2024-41593?

Affected products include Draytek Vigor1000b Firmware, Draytek Vigor165 Firmware, Draytek Vigor166 Firmware, Draytek Vigor2133 Firmware, Draytek Vigor2135 Firmware, and 19 more.

How do I fix CVE-2024-41593?

Upgrade affected software to a fixed version, for example Draytek Vigor1000b Firmware 4.4.3.1, Draytek Vigor165 Firmware 4.2.7, Draytek Vigor166 Firmware 4.2.7 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-41593 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.