CVE-2024-41589

Summary

CVE-2024-41589 is a newly disclosed vulnerability affecting DrayTek Vigor310 devices up to version 4.3.2.6. This issue arises due to the use of unencrypted HTTP for authentication requests, making it susceptible to eavesdropping and potential man-in-the-middle attacks. An attacker can intercept and read sensitive information, such as passwords and credentials, during transmission. Users of these devices are encouraged to update to the latest available firmware, which should address this vulnerability, or consider implementing additional security measures like a VPN to secure their communications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.