CVE-2024-41338
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Feb 27, 2025
Updated: Feb 28, 2025
CWE ID 476
Summary
CVE-2024-41338 is a newly disclosed vulnerability affecting various Draytek devices, including Vigor 165/166, Vigor 2620/LTE200, Vigor 2860/2925, Vigor 2862/2926, Vigor 2133/2762/2832, Vigor 2135/2765/2766, Vigor 2865/2866/2927, Vigor 2962/3910, Vigor 3912, and Vigor 2925. This issue involves a NULL pointer dereference, permitting attackers to trigger a Denial of Service (DoS) event through maliciously crafted DHCP requests. Devices prior to the listed versions are susceptible to this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.