Evil-DB LogoEvil-DB
← All CVEs

CVE-2024-51138

critical · 9.8

Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier; Vigor3910 4.4.3.1 and earlier a stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This flaw occurs due to insufficient bounds checking on the amount of URL parameters, allowing an attacker to exploit the overflow by sending a maliciously crafted request. Consequently, a remote attacker can execute arbitrary code with elevated privileges.

9.8
CVSS
1.1%
EPSS (exploit prob.)
63rd
EPSS percentile
2025-02-27
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

Affected products

VendorProductAffected versions
draytekvigor3912_firmware< 4.4.3.2
draytekvigor3912all versions
draytekvigor2620_firmware< 3.9.9.1
draytekvigor2620all versions
draytekvigorlte200_firmware< 3.9.9.1
draytekvigorlte200all versions
draytekvigor2860_firmware< 3.9.8.3
draytekvigor2860all versions
draytekvigor2925_firmware< 3.9.8.3
draytekvigor2925all versions
draytekvigor2862_firmware< 3.9.9.8
draytekvigor2862all versions
draytekvigor2926_firmware< 3.9.9.8
draytekvigor2926all versions
draytekvigor2133_firmware< 3.9.9.2
draytekvigor2133all versions
draytekvigor2762_firmware< 3.9.9.2
draytekvigor2762all versions
draytekvigor2832_firmware< 3.9.9.2
draytekvigor2832all versions
draytekvigor2135_firmware< 4.4.5.5
draytekvigor2135all versions
draytekvigor2765_firmware< 4.4.5.5
draytekvigor2765all versions
draytekvigor2766_firmware< 4.4.5.5
draytekvigor2766all versions
draytekvigor2763_firmware< 4.4.5.5
draytekvigor2763all versions
draytekvigor2865_firmware< 4.4.5.8
draytekvigor2865all versions
draytekvigor2866_firmware< 4.4.5.8
draytekvigor2866all versions
draytekvigor2927_firmware< 4.4.5.8
draytekvigor2927all versions
draytekvigor2962_firmware< 4.3.2.9
draytekvigor2962_firmware>= 4.4.3, < 4.4.3.2
draytekvigor2962all versions
draytekvigor3910_firmware< 4.3.2.9
draytekvigor3910_firmware>= 4.4.3, < 4.4.3.2
draytekvigor3910all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-51138