CVE-2024-41339
Unrestricted file upload in Draytek Vigor165 Firmware
CVSS score
8.8
EPSS probability
%0.6
Risk score
0.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2024-51138Vulnerability in Draytek Vigor3912
Patch status unknownEPSS %1
9.8
CVE-2024-51139Buffer overflow in Draytek Vigor2620
Patch status unknownEPSS %1
7.5
CVE-2024-41338NULL pointer dereference in Draytek Vigor165 Firmware
Patch status unknownEPSS %0
8.8
CVE-2024-41334Improper certificate validation in Draytek Vigor166 Firmware
Patch status unknownEPSS %0
8.4
CVE-2024-41340Unrestricted file upload in Draytek Vigor165 Firmware
Patch status unknownEPSS %0
-
CVE-2024-12987 Actively exploitedDrayTek Vigor Routers OS Command Injection Vulnerability
Workaround Public Exploits:1EPSS %98
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-41339"