CVE-2024-41339

CVE-2024-41339 describes a critical vulnerability in the CGI endpoint of various Draytek Vigor router models, allowing authenticated attackers to upload malicious kernel modules. This flaw enables arbitrary code execution on affected devices, including models like the Vigor 165/166, 2620/LTE200, 2860/2925, and others, prior to specific patch versions. The vulnerability carries a high CVSS score of 8.8, indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the potential for remote code execution makes patching a priority.