Beveiligingsadvies

CVE-2024-41593

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-03 00:00:00
Laatst bijgewerkt 2025-03-13 18:11:33
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.