Draytek Vigor166 Firmware vulnerabilities

• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8,... CVE-2024-41340 8.4 HighFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior... CVE-2024-41339 8.8 HighFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200... CVE-2024-41338 7.5 HighFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860... CVE-2024-41334 8.8 HighFebruary 27, 2025
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor... CVE-2024-41596 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive... CVE-2024-41594 7.5 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via... CVE-2024-41593 9.8 CriticalOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query... CVE-2024-41592 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS. CVE-2024-41591 6.1 MediumOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of... CVE-2024-41590 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are... CVE-2024-41588 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting... CVE-2024-41587 5.4 MediumOctober 3, 2024
• draytek myvigor, vigor1000b firmware, vigor130 firmware +69 more +71 more Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below... CVE-2023-33778 9.8 CriticalJune 1, 2023
• draytek vigor1000b firmware, vigor130 firmware, vigor165 firmware +88 more +90 more Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script... CVE-2023-23313 6.1 MediumMarch 3, 2023
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +65 more +67 more An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910... CVE-2022-32548 Public exploit EPSS 34.0% 10.0 CriticalAugust 29, 2022