High severity8.0NVD Advisory· Published Oct 3, 2024· Updated Jun 17, 2026
CVE-2024-41592
CVE-2024-41592
Description
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.
Affected products
2Patches
Vulnerability mechanics
References
2- www.forescout.com/resources/draybreak-draytek-research/nvdExploitMitigationThird Party Advisory
- www.forescout.com/resources/draytek14-vulnerabilitiesnvdBroken Link
News mentions
0No linked articles in our index yet.