CVE-2024-51139 - Vulnerability Details

Vendors	Products
Draytek	Vigor1000b Vigor1000b Firmware Vigor2133 Vigor2133 Firmware Vigor2135 Vigor2135 Firmware Vigor2620 Vigor2620 Firmware Vigor2762 Vigor2762 Firmware Vigor2763 Vigor2763 Firmware Vigor2765 Vigor2765 Firmware Vigor2766 Vigor2766 Firmware Vigor2832 Vigor2832 Firmware Vigor2860 Vigor2860 Firmware Vigor2862 Vigor2862 Firmware Vigor2865 Vigor2865 Firmware Vigor2866 Vigor2866 Firmware Vigor2915 Vigor2915 Firmware Vigor2925 Vigor2925 Firmware Vigor2926 Vigor2926 Firmware Vigor2927 Vigor2927 Firmware Vigor2952 Vigor2952 Firmware Vigor2962 Vigor2962 Firmware Vigor3220 Vigor3220 Firmware Vigor3910 Vigor3910 Firmware Vigor3912 Vigor3912 Firmware Vigorlte200 Vigorlte200 Firmware

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-51139", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-02-28T17:23:14.780Z", "dateReserved": "2024-10-28T00:00:00.000Z", "datePublished": "2025-02-27T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-02-27T20:47:37.278Z"}, "descriptions": [{"lang": "en", "value": "Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the \"Content-Length\" header of HTTP POST requests."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "http://draytek.com"}, {"url": "https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-120", "lang": "en", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-02-28T16:59:54.401854Z", "id": "CVE-2024-51139", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-28T17:23:14.780Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2024-51139 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-02-28T17:23:14.780Z (string)

dateReserved : 2024-10-28T00:00:00.000Z (string)

datePublished : 2025-02-27T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2025-02-27T20:47:37.278Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : http://draytek.com (string)

}

1 : { »

url : https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-120 (string)

lang : en (string)

description : CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-28T16:59:54.401854Z (string)

id : CVE-2024-51139 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-28T17:23:14.780Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-51139", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-02-28T17:23:14.780Z", "dateReserved": "2024-10-28T00:00:00.000Z", "datePublished": "2025-02-27T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-02-27T20:47:37.278Z"}, "descriptions": [{"lang": "en", "value": "Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the \"Content-Length\" header of HTTP POST requests."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "http://draytek.com"}, {"url": "https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-51139", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-28T16:59:54.401854Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-120", "description": "CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-28T17:23:11.150Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2024-51139 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-02-28T17:23:14.780Z (string)

dateReserved : 2024-10-28T00:00:00.000Z (string)

datePublished : 2025-02-27T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2025-02-27T20:47:37.278Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : http://draytek.com (string)

}

1 : { »

url : https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-51139 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-28T16:59:54.401854Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-120 (string)

description : CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-28T17:23:11.150Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5485DD5C-12A3-4289-8196-43FFB3DF8B06", "versionEndExcluding": "3.9.9.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:*", "matchCriteriaId": "5D98663B-F2F5-4ADC-9FD5-75846890EEBA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigorlte200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "80EC4363-A351-4117-96CE-1F8B4748FCAC", "versionEndExcluding": "3.9.9.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigorlte200:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DBF2015-9315-44C8-A9FE-E86146F1958E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "519DD534-4B4A-48A4-9C5D-FB197DC5C777", "versionEndExcluding": "3.9.8.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*", "matchCriteriaId": "266C73DE-BFC6-4F3E-B022-559B3971CA44", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2925_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FFCA64D1-9731-4990-AD61-F673D41716BE", "versionEndExcluding": "3.9.8.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2925:-:*:*:*:*:*:*:*", "matchCriteriaId": "7536B29C-2030-4331-B8BF-D269D86D199B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2821747D-FDE2-47FA-B352-70F6FBE0473D", "versionEndExcluding": "3.9.9.8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2862:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B01EDAE-BB9E-4431-BE8C-6505BA7CA42D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "ADD3195E-BA40-40B3-AF13-64AFF4890EE4", "versionEndExcluding": "3.9.9.8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2926:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF1B117B-603D-493C-A804-C18ED332A221", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F53804E7-59F0-4328-A732-9A14EB076E87", "versionEndExcluding": "3.9.9.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*", "matchCriteriaId": "1878E59C-FB40-435D-940A-8952C56FA88B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "42C4DE6D-EE26-4445-8F57-0DCEC311A6A2", "versionEndExcluding": "3.9.9.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*", "matchCriteriaId": "3873B2B9-95C1-4F00-9165-7C4D2A90CDE5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC78800A-438E-4B67-B3A5-F18D10F5D9B5", "versionEndExcluding": "3.9.9.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*", "matchCriteriaId": "B0978465-D59F-4C0A-A29F-5D7BE58BA557", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5CBCFE34-3027-4DBB-9214-4CC891865F25", "versionEndExcluding": "4.4.5.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*", "matchCriteriaId": "AEDC8A7F-08CF-44D2-A9A5-A1353AF35B45", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "162BD269-E656-4A91-9E8C-A5E26A646B2D", "versionEndExcluding": "4.4.5.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*", "matchCriteriaId": "60657812-D3A8-4B1B-B7BE-F629991CB053", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9695AA4E-EC4A-4F02-BFCD-5308CBE19510", "versionEndExcluding": "4.4.5.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0AB3C84-67CA-4531-85FB-1A56F3C93ABF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7ECD7087-34D5-4841-97D1-B9F361327016", "versionEndExcluding": "4.4.5.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:*", "matchCriteriaId": "9EA9DF5D-6651-455A-9305-C42C0FF51F01", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "45D6CD9B-5252-4541-9745-3F4E4D0C5C82", "versionEndExcluding": "4.4.5.8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:*", "matchCriteriaId": "871448C6-9183-4828-A287-05F5EC6A44F6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F40A5ACD-BC60-4C97-BF7D-6B609A1D99E6", "versionEndExcluding": "4.4.5.8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D0D2760-739F-4C79-AEDC-8B2CCCA2FF53", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2927_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "74715D2C-FDF6-4882-A57A-327014FCC1CB", "versionEndExcluding": "4.4.5.8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2927:-:*:*:*:*:*:*:*", "matchCriteriaId": "12460F51-25AB-4EA9-BC43-9CE8DA992D75", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "093FCEE3-FEAA-4DA5-AD20-206D3822C63F", "versionEndExcluding": "4.3.2.9", "vulnerable": true}, {"criteria": "cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "94AD7401-FE5B-4E5F-9469-DEDB101C6990", "versionEndExcluding": "4.4.3.2", "versionStartIncluding": "4.4.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2962:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD0C9A21-7CFE-452F-8505-834AB8579D9B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "529BDB13-03F3-4EF4-A15C-4EF2467DF5AE", "versionEndExcluding": "4.3.2.9", "vulnerable": true}, {"criteria": "cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F18DFF3-93B4-462C-908E-99C243EFFA2F", "versionEndExcluding": "4.4.3.2", "versionStartIncluding": "4.4.3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*", "matchCriteriaId": "894E4DDA-D9BE-441D-B447-B1CE52959347", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor3912_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6AD4EA0F-391C-4A2E-B5CD-0D0689C36F20", "versionEndExcluding": "4.4.3.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor3912:-:*:*:*:*:*:*:*", "matchCriteriaId": "282E5318-DAA8-4AA2-8E7D-4B8BD9162153", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2915_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A876E867-03E8-470E-A830-C0C5FBCCB257", "versionEndExcluding": "4.4.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2915:-:*:*:*:*:*:*:*", "matchCriteriaId": "5860CBE4-328E-418D-9E81-1D3AF7DB8F2B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor1000b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B75C80CA-401A-4228-98F9-D27E529DC32D", "versionEndExcluding": "4.4.3.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor1000b:-:*:*:*:*:*:*:*", "matchCriteriaId": "9FF86645-253A-4BA3-BA2A-2725575C390D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2952_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F39C5A58-E6F1-4BA5-B321-7EA78F8DC7A6", "versionEndExcluding": "3.9.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2952:-:*:*:*:*:*:*:*", "matchCriteriaId": "167336E2-AAA8-4424-AB07-2D7C9E1542B3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor3220_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "85DA10A6-CA24-4D03-B4DC-CC9A33D7E22D", "versionEndExcluding": "3.9.8.5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor3220:-:*:*:*:*:*:*:*", "matchCriteriaId": "64955940-3998-4B76-92D1-D9F3FAB874B4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the \"Content-Length\" header of HTTP POST requests."}, {"lang": "es", "value": "Vulnerabilidad de desbordamiento de b\u00fafer en Vigor2620/LTE200 3.9.8.9 y anteriores y Vigor2860/2925 3.9.8 y anteriores y Vigor2862/2926 3.9.9.5 y anteriores y Vigor2133/2762/2832 3.9.9 y anteriores y Vigor165/166 4.2.7 y anteriores y Vigor2135/2765/2766 4.4.5.1 y anteriores y Vigor2865/2866/2927 4.4.5.3 y anteriores y Vigor2962/3910 4.3.2.8/4.4.3.1 y anteriores y Vigor3912 4.3.6.1 y anteriores permite a un atacante remoto ejecutar c\u00f3digo arbitrario a trav\u00e9s de la gesti\u00f3n del analizador CGI de \"Content-Length\". encabezado de solicitudes HTTP POST."}], "id": "CVE-2024-51139", "lastModified": "2025-05-28T16:23:26.310", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-02-27T21:15:37.123", "references": [{"source": "cve@mitre.org", "tags": ["Product"], "url": "http://draytek.com"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-120"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5485DD5C-12A3-4289-8196-43FFB3DF8B06 (string)

versionEndExcluding : 3.9.9.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5D98663B-F2F5-4ADC-9FD5-75846890EEBA (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigorlte200_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 80EC4363-A351-4117-96CE-1F8B4748FCAC (string)

versionEndExcluding : 3.9.9.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigorlte200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4DBF2015-9315-44C8-A9FE-E86146F1958E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 519DD534-4B4A-48A4-9C5D-FB197DC5C777 (string)

versionEndExcluding : 3.9.8.3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 266C73DE-BFC6-4F3E-B022-559B3971CA44 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2925_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FFCA64D1-9731-4990-AD61-F673D41716BE (string)

versionEndExcluding : 3.9.8.3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2925:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7536B29C-2030-4331-B8BF-D269D86D199B (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2821747D-FDE2-47FA-B352-70F6FBE0473D (string)

versionEndExcluding : 3.9.9.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2862:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B01EDAE-BB9E-4431-BE8C-6505BA7CA42D (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : ADD3195E-BA40-40B3-AF13-64AFF4890EE4 (string)

versionEndExcluding : 3.9.9.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2926:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AF1B117B-603D-493C-A804-C18ED332A221 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

6 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F53804E7-59F0-4328-A732-9A14EB076E87 (string)

versionEndExcluding : 3.9.9.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1878E59C-FB40-435D-940A-8952C56FA88B (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

7 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 42C4DE6D-EE26-4445-8F57-0DCEC311A6A2 (string)

versionEndExcluding : 3.9.9.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3873B2B9-95C1-4F00-9165-7C4D2A90CDE5 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

8 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FC78800A-438E-4B67-B3A5-F18D10F5D9B5 (string)

versionEndExcluding : 3.9.9.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B0978465-D59F-4C0A-A29F-5D7BE58BA557 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

9 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5CBCFE34-3027-4DBB-9214-4CC891865F25 (string)

versionEndExcluding : 4.4.5.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AEDC8A7F-08CF-44D2-A9A5-A1353AF35B45 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

10 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 162BD269-E656-4A91-9E8C-A5E26A646B2D (string)

versionEndExcluding : 4.4.5.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 60657812-D3A8-4B1B-B7BE-F629991CB053 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

11 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9695AA4E-EC4A-4F02-BFCD-5308CBE19510 (string)

versionEndExcluding : 4.4.5.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C0AB3C84-67CA-4531-85FB-1A56F3C93ABF (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

12 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7ECD7087-34D5-4841-97D1-B9F361327016 (string)

versionEndExcluding : 4.4.5.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9EA9DF5D-6651-455A-9305-C42C0FF51F01 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

13 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 45D6CD9B-5252-4541-9745-3F4E4D0C5C82 (string)

versionEndExcluding : 4.4.5.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 871448C6-9183-4828-A287-05F5EC6A44F6 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

14 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F40A5ACD-BC60-4C97-BF7D-6B609A1D99E6 (string)

versionEndExcluding : 4.4.5.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0D0D2760-739F-4C79-AEDC-8B2CCCA2FF53 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

15 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2927_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 74715D2C-FDF6-4882-A57A-327014FCC1CB (string)

versionEndExcluding : 4.4.5.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2927:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 12460F51-25AB-4EA9-BC43-9CE8DA992D75 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

16 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 093FCEE3-FEAA-4DA5-AD20-206D3822C63F (string)

versionEndExcluding : 4.3.2.9 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 94AD7401-FE5B-4E5F-9469-DEDB101C6990 (string)

versionEndExcluding : 4.4.3.2 (string)

versionStartIncluding : 4.4.3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2962:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BD0C9A21-7CFE-452F-8505-834AB8579D9B (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

17 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 529BDB13-03F3-4EF4-A15C-4EF2467DF5AE (string)

versionEndExcluding : 4.3.2.9 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6F18DFF3-93B4-462C-908E-99C243EFFA2F (string)

versionEndExcluding : 4.4.3.2 (string)

versionStartIncluding : 4.4.3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 894E4DDA-D9BE-441D-B447-B1CE52959347 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

18 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor3912_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6AD4EA0F-391C-4A2E-B5CD-0D0689C36F20 (string)

versionEndExcluding : 4.4.3.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor3912:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 282E5318-DAA8-4AA2-8E7D-4B8BD9162153 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

19 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2915_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A876E867-03E8-470E-A830-C0C5FBCCB257 (string)

versionEndExcluding : 4.4.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2915:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5860CBE4-328E-418D-9E81-1D3AF7DB8F2B (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

20 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor1000b_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B75C80CA-401A-4228-98F9-D27E529DC32D (string)

versionEndExcluding : 4.4.3.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor1000b:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9FF86645-253A-4BA3-BA2A-2725575C390D (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

21 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor2952_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F39C5A58-E6F1-4BA5-B321-7EA78F8DC7A6 (string)

versionEndExcluding : 3.9.8.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor2952:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 167336E2-AAA8-4424-AB07-2D7C9E1542B3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

22 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:draytek:vigor3220_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 85DA10A6-CA24-4D03-B4DC-CC9A33D7E22D (string)

versionEndExcluding : 3.9.8.5 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:draytek:vigor3220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 64955940-3998-4B76-92D1-D9F3FAB874B4 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests. (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de desbordamiento de búfer en Vigor2620/LTE200 3.9.8.9 y anteriores y Vigor2860/2925 3.9.8 y anteriores y Vigor2862/2926 3.9.9.5 y anteriores y Vigor2133/2762/2832 3.9.9 y anteriores y Vigor165/166 4.2.7 y anteriores y Vigor2135/2765/2766 4.4.5.1 y anteriores y Vigor2865/2866/2927 4.4.5.3 y anteriores y Vigor2962/3910 4.3.2.8/4.4.3.1 y anteriores y Vigor3912 4.3.6.1 y anteriores permite a un atacante remoto ejecutar código arbitrario a través de la gestión del analizador CGI de "Content-Length". encabezado de solicitudes HTTP POST. (string)

}

]

id : CVE-2024-51139 (string)

lastModified : 2025-05-28T16:23:26.310 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2025-02-27T21:15:37.123 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Product (string)

]

url : http://draytek.com (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-120 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Type	Values Removed	Values Added
First Time appeared		Draytek Draytek vigor1000b Draytek vigor1000b Firmware Draytek vigor2133 Draytek vigor2133 Firmware Draytek vigor2135 Draytek vigor2135 Firmware Draytek vigor2620 Draytek vigor2620 Firmware Draytek vigor2762 Draytek vigor2762 Firmware Draytek vigor2763 Draytek vigor2763 Firmware Draytek vigor2765 Draytek vigor2765 Firmware Draytek vigor2766 Draytek vigor2766 Firmware Draytek vigor2832 Draytek vigor2832 Firmware Draytek vigor2860 Draytek vigor2860 Firmware Draytek vigor2862 Draytek vigor2862 Firmware Draytek vigor2865 Draytek vigor2865 Firmware Draytek vigor2866 Draytek vigor2866 Firmware Draytek vigor2915 Draytek vigor2915 Firmware Draytek vigor2925 Draytek vigor2925 Firmware Draytek vigor2926 Draytek vigor2926 Firmware Draytek vigor2927 Draytek vigor2927 Firmware Draytek vigor2952 Draytek vigor2952 Firmware Draytek vigor2962 Draytek vigor2962 Firmware Draytek vigor3220 Draytek vigor3220 Firmware Draytek vigor3910 Draytek vigor3910 Firmware Draytek vigor3912 Draytek vigor3912 Firmware Draytek vigorlte200 Draytek vigorlte200 Firmware
CPEs		cpe:2.3:h:draytek:vigor1000b:-:::::::* cpe:2.3:h:draytek:vigor2133:-:::::::* cpe:2.3:h:draytek:vigor2135:-:::::::* cpe:2.3:h:draytek:vigor2620:-:::::::* cpe:2.3:h:draytek:vigor2762:-:::::::* cpe:2.3:h:draytek:vigor2763:-:::::::* cpe:2.3:h:draytek:vigor2765:-:::::::* cpe:2.3:h:draytek:vigor2766:-:::::::* cpe:2.3:h:draytek:vigor2832:-:::::::* cpe:2.3:h:draytek:vigor2860:-:::::::* cpe:2.3:h:draytek:vigor2862:-:::::::* cpe:2.3:h:draytek:vigor2865:-:::::::* cpe:2.3:h:draytek:vigor2866:-:::::::* cpe:2.3:h:draytek:vigor2915:-:::::::* cpe:2.3:h:draytek:vigor2925:-:::::::* cpe:2.3:h:draytek:vigor2926:-:::::::* cpe:2.3:h:draytek:vigor2927:-:::::::* cpe:2.3:h:draytek:vigor2952:-:::::::* cpe:2.3:h:draytek:vigor2962:-:::::::* cpe:2.3:h:draytek:vigor3220:-:::::::* cpe:2.3:h:draytek:vigor3910:-:::::::* cpe:2.3:h:draytek:vigor3912:-:::::::* cpe:2.3:h:draytek:vigorlte200:-:::::::* cpe:2.3:o:draytek:vigor1000b_firmware:::::::: cpe:2.3:o:draytek:vigor2133_firmware:::::::: cpe:2.3:o:draytek:vigor2135_firmware:::::::: cpe:2.3:o:draytek:vigor2620_firmware:::::::: cpe:2.3:o:draytek:vigor2762_firmware:::::::: cpe:2.3:o:draytek:vigor2763_firmware:::::::: cpe:2.3:o:draytek:vigor2765_firmware:::::::: cpe:2.3:o:draytek:vigor2766_firmware:::::::: cpe:2.3:o:draytek:vigor2832_firmware:::::::: cpe:2.3:o:draytek:vigor2860_firmware:::::::: cpe:2.3:o:draytek:vigor2862_firmware:::::::: cpe:2.3:o:draytek:vigor2865_firmware:::::::: cpe:2.3:o:draytek:vigor2866_firmware:::::::: cpe:2.3:o:draytek:vigor2915_firmware:::::::: cpe:2.3:o:draytek:vigor2925_firmware:::::::: cpe:2.3:o:draytek:vigor2926_firmware:::::::: cpe:2.3:o:draytek:vigor2927_firmware:::::::: cpe:2.3:o:draytek:vigor2952_firmware:::::::: cpe:2.3:o:draytek:vigor2962_firmware:::::::: cpe:2.3:o:draytek:vigor3220_firmware:::::::: cpe:2.3:o:draytek:vigor3910_firmware:::::::: cpe:2.3:o:draytek:vigor3912_firmware:::::::: cpe:2.3:o:draytek:vigorlte200_firmware::::::::
Vendors & Products		Draytek Draytek vigor1000b Draytek vigor1000b Firmware Draytek vigor2133 Draytek vigor2133 Firmware Draytek vigor2135 Draytek vigor2135 Firmware Draytek vigor2620 Draytek vigor2620 Firmware Draytek vigor2762 Draytek vigor2762 Firmware Draytek vigor2763 Draytek vigor2763 Firmware Draytek vigor2765 Draytek vigor2765 Firmware Draytek vigor2766 Draytek vigor2766 Firmware Draytek vigor2832 Draytek vigor2832 Firmware Draytek vigor2860 Draytek vigor2860 Firmware Draytek vigor2862 Draytek vigor2862 Firmware Draytek vigor2865 Draytek vigor2865 Firmware Draytek vigor2866 Draytek vigor2866 Firmware Draytek vigor2915 Draytek vigor2915 Firmware Draytek vigor2925 Draytek vigor2925 Firmware Draytek vigor2926 Draytek vigor2926 Firmware Draytek vigor2927 Draytek vigor2927 Firmware Draytek vigor2952 Draytek vigor2952 Firmware Draytek vigor2962 Draytek vigor2962 Firmware Draytek vigor3220 Draytek vigor3220 Firmware Draytek vigor3910 Draytek vigor3910 Firmware Draytek vigor3912 Draytek vigor3912 Firmware Draytek vigorlte200 Draytek vigorlte200 Firmware

Type	Values Removed	Values Added
Weaknesses		CWE-120
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Type	Values Removed	Values Added
Description		Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests.
References		http://draytek.com https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object