CVE-2024-41583 in Vigor3910

Riassunto

di MITRE • 03/10/2024

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: MITRE
• Prenotare: 18/07/2024
• Divulgazione: 03/10/2024
• Moderazione: accettato
• Voce: VDB-279179
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.7 (CNA)
• EPSS: 0.00283
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Telecommunication, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-41583
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-41583
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-41583/