1. Home
  2. CVE Database
  3. CVE-2024-41340
HIGH · 8.4

CVE-2024-41340

An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9....

Vulnerability Description

An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 allows attackers to upload crafted APP Enforcement modules, leading to arbitrary code execution.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
DraytekVigor165 Firmware< 4.2.7
DraytekVigor165-
DraytekVigor166 Firmware< 4.2.7
DraytekVigor166-
DraytekVigor2620 Firmware< 3.9.8.9
DraytekVigor2620-
DraytekVigorlte200 Firmware< 3.9.8.9
DraytekVigorlte200-
DraytekVigor2860 Firmware< 3.9.8
DraytekVigor2860-
DraytekVigor2925 Firmware< 3.9.8
DraytekVigor2925-
DraytekVigor2862 Firmware< 3.9.9.5
DraytekVigor2862-
DraytekVigor2926 Firmware< 3.9.9.5
DraytekVigor2926-
DraytekVigor2133 Firmware< 3.9.9
DraytekVigor2133-
DraytekVigor2762 Firmware< 3.9.9
DraytekVigor2762-

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2024-41340?

CVE-2024-41340 is a vulnerability with a CVSS score of 8.4 (HIGH). An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9....

How severe is CVE-2024-41340?

CVE-2024-41340 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-41340?

Check the references section above for vendor advisories and patch information. Affected products include: Draytek Vigor165 Firmware, Draytek Vigor165, Draytek Vigor166 Firmware, Draytek Vigor166, Draytek Vigor2620 Firmware.