Draytek Vigor2763 Firmware vulnerabilities

• draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 more Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8... CVE-2024-51139 9.8 CriticalFebruary 27, 2025
• draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 more Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and... CVE-2024-51138 9.8 CriticalFebruary 27, 2025
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor... CVE-2024-41596 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive... CVE-2024-41594 7.5 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via... CVE-2024-41593 9.8 CriticalOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query... CVE-2024-41592 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS. CVE-2024-41591 6.1 MediumOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of... CVE-2024-41590 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are... CVE-2024-41588 8.0 HighOctober 3, 2024
• draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting... CVE-2024-41587 5.4 MediumOctober 3, 2024
• draytek vigor1000b firmware, vigor130 firmware, vigor165 firmware +88 more +90 more Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script... CVE-2023-23313 6.1 MediumMarch 3, 2023