1. Home
  2. CVE Database
  3. CVE-2024-41594
HIGH · 7.5

CVE-2024-41594

An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of...

Vulnerability Description

An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DraytekVigor2620 FirmwareAll versions
DraytekVigor2620-
DraytekVigor2915 Firmware< 4.4.5.3
DraytekVigor2915-
DraytekVigor2866 Firmware< 4.4.5.2
DraytekVigor2866-
DraytekVigor2766 Firmware< 4.4.5.3
DraytekVigor2766-
DraytekVigor2865 Firmware< 4.4.5.2
DraytekVigor2865-
DraytekVigor2765 Firmware< 4.4.5.3
DraytekVigor2765-
DraytekVigor2763 Firmware< 4.4.5.3
DraytekVigor2763-
DraytekVigor2135 Firmware< 4.4.5.3
DraytekVigor2135-
DraytekVigor166 Firmware< 4.2.7
DraytekVigor166-
DraytekVigor1000B Firmware< 4.3.2.8
DraytekVigor1000B-

Related Weaknesses (CWE)

CWE-326

References

FAQ

What is CVE-2024-41594?

CVE-2024-41594 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of...

How severe is CVE-2024-41594?

CVE-2024-41594 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-41594?

Check the references section above for vendor advisories and patch information. Affected products include: Draytek Vigor2620 Firmware, Draytek Vigor2620, Draytek Vigor2915 Firmware, Draytek Vigor2915, Draytek Vigor2866 Firmware.