CVE-2024-41590 Information

Description

Several CGI endpoints are vulnerable to buffer overflows by authenticated users because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6.

Reference

https://www.forescout.com/resources/draytek14-vulnerabilities https://www.forescout.com/resources/draybreak-draytek-research/