Vigor166 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Draytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7) |
|---|---|
| Product | Vigor166 Firmware (b59c3bcc-6f89-5d8b-98ec-b2b427cc6205) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41596 |
vulnerable | 2026-06-08 06:43:54.657570 |
Details available
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.
Published: 2024-10-03T00:00:00.000Z
Updated: 2024-10-03T19:04:38.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41594 |
vulnerable | 2026-06-08 06:43:54.647940 |
Details available
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-19T15:38:27.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41593 |
vulnerable | 2026-06-08 06:43:54.643230 |
Details available
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-13T18:11:33.093Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41592 |
vulnerable | 2026-06-08 06:43:54.638808 |
Details available
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
Published: 2024-10-03T00:00:00.000Z
Updated: 2024-10-03T18:59:51.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41591 |
vulnerable | 2026-06-08 06:43:54.634780 |
Details available
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-14T15:36:23.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41590 |
vulnerable | 2026-06-08 06:43:54.630534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41588 |
vulnerable | 2026-06-08 06:43:54.626397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41587 |
vulnerable | 2026-06-08 06:43:54.603614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41340 |
vulnerable | 2026-06-08 06:43:54.412879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41339 |
vulnerable | 2026-06-08 06:43:54.398030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41338 |
vulnerable | 2026-06-08 06:43:54.395207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41334 |
vulnerable | 2026-06-08 06:43:54.358424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33778 |
vulnerable | 2026-06-08 06:06:23.530444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23313 |
vulnerable | 2026-06-08 05:54:27.960539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32548 |
vulnerable | 2026-06-08 05:44:45.069806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.