Vigor2832
Vendor:
First CVE: Aug 29, 2022 · Active for 3 years
16
Total CVEs
More Total CVEs than 92% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 71% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Vigor2832 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 29, 2022
3 years ago
Most Recent CVE
Feb 27, 2025
512 days ago
CVE Severity & Scoring
Vigor283216 CVEs
19%
56%
25%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (6.3%)
Network11 (68.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network4 (25.0%)
Attack Complexity
Low16 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None13 (81.3%)
Unknown0 (0.0%)
Required3 (18.8%)
Privileges Required
Low7 (43.8%)
High0 (0.0%)
None9 (56.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-32548CRITICAL An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or passwo | Aug 29, 2022 | 9.8 | 50 | NO | NO |
CVE-2024-51138CRITICAL Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; V | Feb 27, 2025 | 9.8 | 31 | NO | NO |
CVE-2024-51139CRITICAL Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and | Feb 27, 2025 | 9.8 | 29 | NO | NO |
CVE-2024-41334HIGH Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior | Feb 27, 2025 | 8.8 | 29 | NO | NO |
CVE-2024-41339HIGH An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, | Feb 27, 2025 | 8.8 | 27 | NO | NO |
CVE-2024-41593CRITICAL DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the | Oct 3, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-41592HIGH DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key | Oct 3, 2024 | 8.0 | 27 | NO | NO |
CVE-2024-41340HIGH An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762 | Feb 27, 2025 | 8.4 | 26 | NO | NO |
CVE-2024-41338HIGH A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9. | Feb 27, 2025 | 7.5 | 24 | NO | NO |
CVE-2024-41596HIGH Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters | Oct 3, 2024 | 8.0 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Vigor2832
Top CWEs
Versions
No cataloged versions.