PT-2025-9024 · Draytek · Vigor2866+19

Published 2025-02-27 · Updated 2025-05-28 · CVE-2024-51138

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Vigor165/166 versions 4.2.7 and earlier Vigor2620/LTE200 versions 3.9.8.9 and earlier Vigor2860/2925 versions 3.9.8 and earlier Vigor2862/2926 versions 3.9.9.5 and earlier Vigor2133/2762/2832 versions 3.9.9 and earlier Vigor2135/2765/2766 versions 4.4.5 and earlier Vigor2865/2866/2927 versions 4.4.5.3 and earlier Vigor2962 versions 4.3.2.8 and earlier Vigor3912 versions 4.3.6.1 and earlier Vigor3910 versions 4.4.3.1 and earlier

Description A stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This flaw occurs due to insufficient bounds checking on the amount of URL parameters, allowing an attacker to exploit the overflow by sending a maliciously crafted request. Consequently, a remote attacker can execute arbitrary code with elevated privileges.

Recommendations For Vigor165/166 versions 4.2.7 and earlier, update to a version later than 4.2.7. For Vigor2620/LTE200 versions 3.9.8.9 and earlier, update to a version later than 3.9.8.9. For Vigor2860/2925 versions 3.9.8 and earlier, update to a version later than 3.9.8. For Vigor2862/2926 versions 3.9.9.5 and earlier, update to a version later than 3.9.9.5. For Vigor2133/2762/2832 versions 3.9.9 and earlier, update to a version later than 3.9.9. For Vigor2135/2765/2766 versions 4.4.5 and earlier, update to a version later than 4.4.5. For Vigor2865/2866/2927 versions 4.4.5.3 and earlier, update to a version later than 4.4.5.3. For Vigor2962 versions 4.3.2.8 and earlier, update to a version later than 4.3.2.8. For Vigor3912 versions 4.3.6.1 and earlier, update to a version later than 4.3.6.1. For Vigor3910 versions 4.4.3.1 and earlier, update to a version later than 4.4.3.1.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-51138

Affected Products

Lte200

Vigor165

Vigor166

Vigor2133

Vigor2135

Vigor2620

Vigor2762

Vigor2765

Vigor2766

Vigor2832

Vigor2860

Vigor2862

Vigor2865

Vigor2866

Vigor2925

Vigor2926

Vigor2927

Vigor2962

Vigor3910

Vigor3912

References · 8

• https://osv.dev/vulnerability/CVE-2024-51138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51138 · Security Note
• https://twitter.com/cybercronai/status/1895806683558920668 · Twitter Post
• http://draytek.com · Note
• https://t.me/true_secator/6904 · Telegram Post
• https://t.me/cvenotify/123904 · Telegram Post
• https://t.me/cvedetector/19072 · Telegram Post
• https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946 · Note