← All CVEs

CVE-2024-51139

critical · 9.8

Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests.

9.8
CVSS
1.0%
EPSS (exploit prob.)
61st
EPSS percentile
2025-02-27
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120

Affected products

VendorProductAffected versions
draytekvigor2620_firmware< 3.9.9.1
draytekvigor2620all versions
draytekvigorlte200_firmware< 3.9.9.1
draytekvigorlte200all versions
draytekvigor2860_firmware< 3.9.8.3
draytekvigor2860all versions
draytekvigor2925_firmware< 3.9.8.3
draytekvigor2925all versions
draytekvigor2862_firmware< 3.9.9.8
draytekvigor2862all versions
draytekvigor2926_firmware< 3.9.9.8
draytekvigor2926all versions
draytekvigor2133_firmware< 3.9.9.2
draytekvigor2133all versions
draytekvigor2762_firmware< 3.9.9.2
draytekvigor2762all versions
draytekvigor2832_firmware< 3.9.9.2
draytekvigor2832all versions
draytekvigor2135_firmware< 4.4.5.5
draytekvigor2135all versions
draytekvigor2765_firmware< 4.4.5.5
draytekvigor2765all versions
draytekvigor2766_firmware< 4.4.5.5
draytekvigor2766all versions
draytekvigor2763_firmware< 4.4.5.5
draytekvigor2763all versions
draytekvigor2865_firmware< 4.4.5.8
draytekvigor2865all versions
draytekvigor2866_firmware< 4.4.5.8
draytekvigor2866all versions
draytekvigor2927_firmware< 4.4.5.8
draytekvigor2927all versions
draytekvigor2962_firmware< 4.3.2.9
draytekvigor2962_firmware>= 4.4.3, < 4.4.3.2
draytekvigor2962all versions
draytekvigor3910_firmware< 4.3.2.9
draytekvigor3910_firmware>= 4.4.3, < 4.4.3.2
draytekvigor3910all versions
draytekvigor3912_firmware< 4.4.3.2
draytekvigor3912all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-51139