Medium · 5.4 CVE-2024-41587 EUVD-2024-39084GHSA-7cq8-ppvr-h6pr

Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4…

Published Oct 3, 2024 · Updated Mar 18, 2025 · Assigned by mitre

Description

Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6.

Advisories 2

WID-SEC-2024-3086 DrayTek Vigor Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2024
NCSC-2024-0388 Kwetsbaarheden verholpen in Draytek Vigor routers NCSC-NL (Netherlands) · Oct 4, 2024

References