CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2024-41591
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- draytek:vigor1000b_firmware
- draytek:vigor165_firmware
- draytek:vigor166_firmware
- draytek:vigor2133_firmware
- draytek:vigor2135_firmware
- draytek:vigor2620_firmware
- draytek:vigor2762_firmware
- draytek:vigor2763_firmware
- draytek:vigor2765_firmware
- draytek:vigor2766_firmware
- draytek:vigor2832_firmware
- draytek:vigor2860_firmware
- draytek:vigor2862_firmware
- draytek:vigor2865_firmware
- draytek:vigor2866_firmware
- draytek:vigor2915_firmware
- draytek:vigor2925_firmware
- draytek:vigor2926_firmware
- draytek:vigor2952_firmware
- draytek:vigor2962_firmware
- draytek:vigor3220_firmware
- draytek:vigor3910_firmware
- draytek:vigor3912_firmware
- draytek:vigorlte200_firmware