CVE-2024-41583

DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name.

Score

CVSS 3.1 4.7 Medium

Status

Analyzed - cve@mitre.org

Published

2024-10-03

Last modified

2024-10-03

Weaknesses

CWE-79

Affected products

• Vigor3910 Firmware (Draytek)

References

• https://www.forescout.com/resources/draybreak-draytek-research/
• https://www.forescout.com/resources/draytek14-vulnerabilities