CVE-2024-51139

CVE-2024-51139 is a critical buffer overflow vulnerability affecting multiple DrayTek Vigor router models, including the Vigor2620, Vigor2860, Vigor2862, Vigor2133, Vigor165, Vigor2135, Vigor2865, Vigor2962, and Vigor3912 series, across various firmware versions. This flaw allows a remote, unauthenticated attacker to execute arbitrary code by manipulating the "Content-Length" header in HTTP POST requests sent to the device's CGI parser. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, its high FAUCET risk score indicates a substantial potential threat.