DrayTek Vigor166
Approved changes feed: RSS · Atom
cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Draytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7) |
|---|---|
| Product | Vigor166 (e2c44dc9-05fb-5724-91be-560f4e81b5ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41596 |
not_vulnerable | 2026-06-08 06:43:54.657667 |
Details available
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.
Published: 2024-10-03T00:00:00.000Z
Updated: 2024-10-03T19:04:38.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41594 |
not_vulnerable | 2026-06-08 06:43:54.647961 |
Details available
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-19T15:38:27.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41593 |
not_vulnerable | 2026-06-08 06:43:54.643250 |
Details available
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-13T18:11:33.093Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41592 |
not_vulnerable | 2026-06-08 06:43:54.638839 |
Details available
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
Published: 2024-10-03T00:00:00.000Z
Updated: 2024-10-03T18:59:51.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41591 |
not_vulnerable | 2026-06-08 06:43:54.634801 |
Details available
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.
Published: 2024-10-03T00:00:00.000Z
Updated: 2025-03-14T15:36:23.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41590 |
not_vulnerable | 2026-06-08 06:43:54.630653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41588 |
not_vulnerable | 2026-06-08 06:43:54.626418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41587 |
not_vulnerable | 2026-06-08 06:43:54.603761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41340 |
not_vulnerable | 2026-06-08 06:43:54.412900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41339 |
not_vulnerable | 2026-06-08 06:43:54.398048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41338 |
not_vulnerable | 2026-06-08 06:43:54.395230 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41334 |
not_vulnerable | 2026-06-08 06:43:54.359253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33778 |
not_vulnerable | 2026-06-08 06:06:23.531049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23313 |
not_vulnerable | 2026-06-08 05:54:27.961039 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32548 |
not_vulnerable | 2026-06-08 05:44:45.070324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.