DrayTek Vigor165
Approved changes feed: RSS · Atom
cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Draytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7) |
|---|---|
| Product | Vigor165 (4ec7fa22-6f0d-535c-821b-a69b7a5b3ab3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41596 |
not_vulnerable | 2026-06-08 06:43:54.658104 |
Details available
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.
Published: 2024-10-03T00:00:00.000Z
Updated: 2024-10-03T19:04:38.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41594 |
not_vulnerable | 2026-06-08 06:43:54.648141 |
Details available
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-19T15:38:27.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41593 |
not_vulnerable | 2026-06-08 06:43:54.643175 |
Details available
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-13T18:11:33.093Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41592 |
not_vulnerable | 2026-06-08 06:43:54.639161 |
Details available
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
Published: 2024-10-03T00:00:00.000Z
Updated: 2024-10-03T18:59:51.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41591 |
not_vulnerable | 2026-06-08 06:43:54.634991 |
Details available
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-14T15:36:23.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41590 |
not_vulnerable | 2026-06-08 06:43:54.630914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41588 |
not_vulnerable | 2026-06-08 06:43:54.626647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41587 |
not_vulnerable | 2026-06-08 06:43:54.593956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41340 |
not_vulnerable | 2026-06-08 06:43:54.412856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41339 |
not_vulnerable | 2026-06-08 06:43:54.398007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41338 |
not_vulnerable | 2026-06-08 06:43:54.395031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41334 |
not_vulnerable | 2026-06-08 06:43:54.393822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33778 |
not_vulnerable | 2026-06-08 06:06:23.529760 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23313 |
not_vulnerable | 2026-06-08 05:54:27.962325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32548 |
not_vulnerable | 2026-06-08 05:44:45.069104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.