CVE-2024-41586

Summary

CVE-2024-41586 is a newly disclosed buffer overflow vulnerability that affects DrayTek Vigor310 devices up to version 4.3.2.6. An attacker can exploit this issue by sending a specially crafted query string to the cgi-bin/ipfedr.cgi component. By overflowing the stack, the attacker gains the ability to execute arbitrary code remotely, potentially leading to unauthorized access or system takeover. This vulnerability poses a significant risk to organizations and individuals using impacted devices, necessitating immediate updates to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.