Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 were discovered to not utilize certificate verification, allowing attackers to upload crafted APPE modules from non-official servers, leading to arbitrary code execution.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Draytek
  • Vigor165
  • Vigor165 Firmware
  • Vigor166
  • Vigor166 Firmware
  • Vigor2133
  • Vigor2133 Firmware
  • Vigor2135
  • Vigor2135 Firmware
  • Vigor2620
  • Vigor2620 Firmware
  • Vigor2762
  • Vigor2762 Firmware
  • Vigor2765
  • Vigor2765 Firmware
  • Vigor2766
  • Vigor2766 Firmware
  • Vigor2832
  • Vigor2832 Firmware
  • Vigor2860
  • Vigor2860 Firmware
  • Vigor2862
  • Vigor2862 Firmware
  • Vigor2865
  • Vigor2865 Firmware
  • Vigor2866
  • Vigor2866 Firmware
  • Vigor2925
  • Vigor2925 Firmware
  • Vigor2926
  • Vigor2926 Firmware
  • Vigor2927
  • Vigor2927 Firmware
  • Vigor2962
  • Vigor2962 Firmware
  • Vigor3910
  • Vigor3910 Firmware
  • Vigor3912
  • Vigor3912 Firmware
  • Vigorlte200
  • Vigorlte200 Firmware

Configuration 1 [-]

AND
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:draytek:vigorlte200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigorlte200:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:draytek:vigor2925_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2925:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2862:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2926:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND
cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND
cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND
cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND
cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND
cpe:2.3:o:draytek:vigor2927_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2927:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND
cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2962:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND
cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND
cpe:2.3:o:draytek:vigor3912_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor3912:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND
cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*

No data.

References
Link Providers
http://draytek.com cve-icon cve-icon
https://medium.com/faraday/advisory-multiple-vulnerabilities-affecting-draytek-routers-78a6cb8b3946 cve-icon cve-icon
History

Tue, 03 Jun 2025 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Draytek
Draytek vigor165
Draytek vigor165 Firmware
Draytek vigor166
Draytek vigor166 Firmware
Draytek vigor2133
Draytek vigor2133 Firmware
Draytek vigor2135
Draytek vigor2135 Firmware
Draytek vigor2620
Draytek vigor2620 Firmware
Draytek vigor2762
Draytek vigor2762 Firmware
Draytek vigor2765
Draytek vigor2765 Firmware
Draytek vigor2766
Draytek vigor2766 Firmware
Draytek vigor2832
Draytek vigor2832 Firmware
Draytek vigor2860
Draytek vigor2860 Firmware
Draytek vigor2862
Draytek vigor2862 Firmware
Draytek vigor2865
Draytek vigor2865 Firmware
Draytek vigor2866
Draytek vigor2866 Firmware
Draytek vigor2925
Draytek vigor2925 Firmware
Draytek vigor2926
Draytek vigor2926 Firmware
Draytek vigor2927
Draytek vigor2927 Firmware
Draytek vigor2962
Draytek vigor2962 Firmware
Draytek vigor3910
Draytek vigor3910 Firmware
Draytek vigor3912
Draytek vigor3912 Firmware
Draytek vigorlte200
Draytek vigorlte200 Firmware
CPEs cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2862:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2865:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2866:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2925:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2926:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2927:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2962:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor3910:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor3912:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigorlte200:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2925_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2927_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor3912_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigorlte200_firmware:*:*:*:*:*:*:*:*
Vendors & Products Draytek
Draytek vigor165
Draytek vigor165 Firmware
Draytek vigor166
Draytek vigor166 Firmware
Draytek vigor2133
Draytek vigor2133 Firmware
Draytek vigor2135
Draytek vigor2135 Firmware
Draytek vigor2620
Draytek vigor2620 Firmware
Draytek vigor2762
Draytek vigor2762 Firmware
Draytek vigor2765
Draytek vigor2765 Firmware
Draytek vigor2766
Draytek vigor2766 Firmware
Draytek vigor2832
Draytek vigor2832 Firmware
Draytek vigor2860
Draytek vigor2860 Firmware
Draytek vigor2862
Draytek vigor2862 Firmware
Draytek vigor2865
Draytek vigor2865 Firmware
Draytek vigor2866
Draytek vigor2866 Firmware
Draytek vigor2925
Draytek vigor2925 Firmware
Draytek vigor2926
Draytek vigor2926 Firmware
Draytek vigor2927
Draytek vigor2927 Firmware
Draytek vigor2962
Draytek vigor2962 Firmware
Draytek vigor3910
Draytek vigor3910 Firmware
Draytek vigor3912
Draytek vigor3912 Firmware
Draytek vigorlte200
Draytek vigorlte200 Firmware

Tue, 06 May 2025 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-94

Tue, 06 May 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-295
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 04 Mar 2025 03:45:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 28 Feb 2025 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-94
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Thu, 27 Feb 2025 21:00:00 +0000

Type Values Removed Values Added
Description Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912 prior to v4.3.5.2, and Vigor 2925 up to v3.9.6 were discovered to not utilize certificate verification, allowing attackers to upload crafted APPE modules from non-official servers, leading to arbitrary code execution.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-02-27T00:00:00.000Z

Updated: 2025-05-06T18:05:50.033Z

Reserved: 2024-07-18T00:00:00.000Z

Link: CVE-2024-41334

cve-icon Vulnrichment

Updated: 2025-02-28T15:57:31.008Z

cve-icon NVD

Status : Analyzed

Published: 2025-02-27T21:15:36.483

Modified: 2025-06-03T14:06:43.900

Link: CVE-2024-41334

cve-icon Redhat

No data.