What’s Vulnerable › Vulnerabilities

CVE-2024-23721

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-20 · updated 2026-06-17
• Weakness: CWE-22

Description

A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information.

Affected products

• DrayTek Vigor3910 Firmware: through 4.3.2.5

References

• https://draytek.com
• https://gist.github.com/rrrrrrri/8e9cac08eb4d9c01ab258bd5b0f8f7d8
• https://draytek.com
• https://gist.github.com/rrrrrrri/8e9cac08eb4d9c01ab258bd5b0f8f7d8

Get alerted when CVE-2024-23721 or the next vulnerability affects your stack