Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-51138 Details

Description

Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier; Vigor3910 4.4.3.1 and earlier a stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This flaw occurs due to insufficient bounds checking on the amount of URL parameters, allowing an attacker to exploit the overflow by sending a maliciously crafted request. Consequently, a remote attacker can execute arbitrary code with elevated privileges.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946	[email protected]	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-121	Stack-based Buffer Overflow	CISA-ADP

Affected Products

Product	Versions
draytek vigor3912 firmware	< 4.4.3.2
CPE cpe:2.3:o:draytek:vigor3912_firmware:::::::: Remediation No remediation found in references.
draytek vigor3912	All versions
CPE cpe:2.3:h:draytek:vigor3912:-:::::::* Remediation No remediation found in references.
draytek vigor2620 firmware	< 3.9.9.1
CPE cpe:2.3:o:draytek:vigor2620_firmware:::::::: Remediation No remediation found in references.
draytek vigor2620	All versions
CPE cpe:2.3:h:draytek:vigor2620:-:::::::* Remediation No remediation found in references.
draytek vigorlte200 firmware	< 3.9.9.1
CPE cpe:2.3:o:draytek:vigorlte200_firmware:::::::: Remediation No remediation found in references.
draytek vigorlte200	All versions
CPE cpe:2.3:h:draytek:vigorlte200:-:::::::* Remediation No remediation found in references.
draytek vigor2860 firmware	< 3.9.8.3
CPE cpe:2.3:o:draytek:vigor2860_firmware:::::::: Remediation No remediation found in references.
draytek vigor2860	All versions
CPE cpe:2.3:h:draytek:vigor2860:-:::::::* Remediation No remediation found in references.
draytek vigor2925 firmware	< 3.9.8.3
CPE cpe:2.3:o:draytek:vigor2925_firmware:::::::: Remediation No remediation found in references.
draytek vigor2925	All versions
CPE cpe:2.3:h:draytek:vigor2925:-:::::::* Remediation No remediation found in references.
draytek vigor2862 firmware	< 3.9.9.8
CPE cpe:2.3:o:draytek:vigor2862_firmware:::::::: Remediation No remediation found in references.
draytek vigor2862	All versions
CPE cpe:2.3:h:draytek:vigor2862:-:::::::* Remediation No remediation found in references.
draytek vigor2926 firmware	< 3.9.9.8
CPE cpe:2.3:o:draytek:vigor2926_firmware:::::::: Remediation No remediation found in references.
draytek vigor2926	All versions
CPE cpe:2.3:h:draytek:vigor2926:-:::::::* Remediation No remediation found in references.
draytek vigor2133 firmware	< 3.9.9.2
CPE cpe:2.3:o:draytek:vigor2133_firmware:::::::: Remediation No remediation found in references.
draytek vigor2133	All versions
CPE cpe:2.3:h:draytek:vigor2133:-:::::::* Remediation No remediation found in references.
draytek vigor2762 firmware	< 3.9.9.2
CPE cpe:2.3:o:draytek:vigor2762_firmware:::::::: Remediation No remediation found in references.
draytek vigor2762	All versions
CPE cpe:2.3:h:draytek:vigor2762:-:::::::* Remediation No remediation found in references.
draytek vigor2832 firmware	< 3.9.9.2
CPE cpe:2.3:o:draytek:vigor2832_firmware:::::::: Remediation No remediation found in references.
draytek vigor2832	All versions
CPE cpe:2.3:h:draytek:vigor2832:-:::::::* Remediation No remediation found in references.
draytek vigor2135 firmware	< 4.4.5.5
CPE cpe:2.3:o:draytek:vigor2135_firmware:::::::: Remediation No remediation found in references.
draytek vigor2135	All versions
CPE cpe:2.3:h:draytek:vigor2135:-:::::::* Remediation No remediation found in references.
draytek vigor2765 firmware	< 4.4.5.5
CPE cpe:2.3:o:draytek:vigor2765_firmware:::::::: Remediation No remediation found in references.
draytek vigor2765	All versions
CPE cpe:2.3:h:draytek:vigor2765:-:::::::* Remediation No remediation found in references.
draytek vigor2766 firmware	< 4.4.5.5
CPE cpe:2.3:o:draytek:vigor2766_firmware:::::::: Remediation No remediation found in references.
draytek vigor2766	All versions
CPE cpe:2.3:h:draytek:vigor2766:-:::::::* Remediation No remediation found in references.
draytek vigor2763 firmware	< 4.4.5.5
CPE cpe:2.3:o:draytek:vigor2763_firmware:::::::: Remediation No remediation found in references.
draytek vigor2763	All versions
CPE cpe:2.3:h:draytek:vigor2763:-:::::::* Remediation No remediation found in references.
draytek vigor2865 firmware	< 4.4.5.8
CPE cpe:2.3:o:draytek:vigor2865_firmware:::::::: Remediation No remediation found in references.
draytek vigor2865	All versions
CPE cpe:2.3:h:draytek:vigor2865:-:::::::* Remediation No remediation found in references.
draytek vigor2866 firmware	< 4.4.5.8
CPE cpe:2.3:o:draytek:vigor2866_firmware:::::::: Remediation No remediation found in references.
draytek vigor2866	All versions
CPE cpe:2.3:h:draytek:vigor2866:-:::::::* Remediation No remediation found in references.
draytek vigor2927 firmware	< 4.4.5.8
CPE cpe:2.3:o:draytek:vigor2927_firmware:::::::: Remediation No remediation found in references.
draytek vigor2927	All versions
CPE cpe:2.3:h:draytek:vigor2927:-:::::::* Remediation No remediation found in references.
draytek vigor2962 firmware	< 4.3.2.9 >= 4.4.3, < 4.4.3.2
CPE cpe:2.3:o:draytek:vigor2962_firmware:::::::: Remediation No remediation found in references.
draytek vigor2962	All versions
CPE cpe:2.3:h:draytek:vigor2962:-:::::::* Remediation No remediation found in references.
draytek vigor3910 firmware	< 4.3.2.9 >= 4.4.3, < 4.4.3.2
CPE cpe:2.3:o:draytek:vigor3910_firmware:::::::: Remediation No remediation found in references.
draytek vigor3910	All versions
CPE cpe:2.3:h:draytek:vigor3910:-:::::::* Remediation No remediation found in references.
draytek vigor2915 firmware	< 4.4.5
CPE cpe:2.3:o:draytek:vigor2915_firmware:::::::: Remediation No remediation found in references.
draytek vigor2915	All versions
CPE cpe:2.3:h:draytek:vigor2915:-:::::::* Remediation No remediation found in references.
draytek vigor1000b firmware	< 4.4.3.2
CPE cpe:2.3:o:draytek:vigor1000b_firmware:::::::: Remediation No remediation found in references.
draytek vigor1000b	All versions
CPE cpe:2.3:h:draytek:vigor1000b:-:::::::* Remediation No remediation found in references.
draytek vigor2952 firmware	< 3.9.8.5
CPE cpe:2.3:o:draytek:vigor2952_firmware:::::::: Remediation No remediation found in references.
draytek vigor2952	All versions
CPE cpe:2.3:h:draytek:vigor2952:-:::::::* Remediation No remediation found in references.
draytek vigor3220 firmware	< 3.9.8.5
CPE cpe:2.3:o:draytek:vigor3220_firmware:::::::: Remediation No remediation found in references.
draytek vigor3220	All versions
CPE cpe:2.3:h:draytek:vigor3220:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jul 5, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
May 28, 2025	Initial Analysis	[email protected]
Feb 28, 2025	CVE Modified	CISA-ADP
Feb 27, 2025	New CVE Received	[email protected]

CVE-2024-51138 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation