CVE-2024-51139 – cybernieuws.nl

Beschrijving NL

Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests.

Origineel (Engels) tonen

Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests.

Vendors

Draytek

Affected products

Vigor2620 Firmware Vigor2620 Vigorlte200 Firmware Vigorlte200 Vigor2860 Firmware Vigor2860 Vigor2925 Firmware Vigor2925 Vigor2862 Firmware Vigor2862 Vigor2926 Firmware Vigor2926 Vigor2133 Firmware Vigor2133 Vigor2762 Firmware Vigor2762 Vigor2832 Firmware Vigor2832 Vigor2135 Firmware Vigor2135 Vigor2765 Firmware Vigor2765 Vigor2766 Firmware Vigor2766 Vigor2763 Firmware Vigor2763 Vigor2865 Firmware Vigor2865 Vigor2866 Firmware Vigor2866 Vigor2927 Firmware Vigor2927 Vigor2962 Firmware Vigor2962 Vigor3910 Firmware Vigor3910 Vigor3912 Firmware Vigor3912 Vigor2915 Firmware Vigor2915 Vigor1000b Firmware Vigor1000b Vigor2952 Firmware Vigor2952 Vigor3220 Firmware Vigor3220

References

medium.com