Known vulnerabilities in Vigor2620 LTE
Vendor:
DrayTek Corp.
Software:
Vigor2620 LTE
Software CPE:
cpe:2.3:h:draytek_corp:vigor2620_lte:*:*:*:*:*:*:*:*
Website:
https://www.draytek.co.uk
Total vulnerabilities:
11
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU106357 - Unrestricted Upload of File with Dangerous Type CVE-2024-41340 |
CWE-434 | High | 3.9.8.9 | 01.04.2025 |
SB2025040126 |
||
| #VU106355 - NULL Pointer Dereference CVE-2024-41338 |
CWE-476 | High | 3.9.8.9 | 01.04.2025 |
SB2025040126 |
||
| #VU106354 - Unprotected Storage of Credentials CVE-2024-41336 |
CWE-256 | Low | 3.9.8.9 | 01.04.2025 |
SB2025040126 |
||
| #VU106353 - Observable discrepancy CVE-2024-41335 |
CWE-203 | High | 3.9.8.9 | 01.04.2025 |
SB2025040126 |
||
| #VU106352 - Improper Control of Generation of Code ('Code Injection') CVE-2024-41339 |
CWE-94 | High | 3.9.8.9 | 01.04.2025 |
SB2025040126 |
||
| #VU106351 - Improper Certificate Validation CVE-2024-41334 |
CWE-295 | High | 3.9.8.9 | 01.04.2025 |
SB2025040126 |
||
| #VU106350 - Integer overflow CVE-2024-51139 |
CWE-190 | High | 3.9.9.1 | 01.04.2025 |
SB2025040124 |
||
| #VU106349 - Stack-based buffer overflow CVE-2024-51138 |
CWE-121 | High | 3.9.9.1 | 01.04.2025 |
SB2025040124 |
||
| #VU103559 - Out-of-bounds write CVE-2025-20633 |
CWE-787 | High | 3.9.9.3 | 04.02.2025 |
SB2025020401 SB2025040837 |
||
| #VU103560 - Out-of-bounds write CVE-2025-20632 |
CWE-787 | Low | 3.9.9.3 | 04.02.2025 |
SB2025020401 SB2025040837 |
||
| #VU103561 - Out-of-bounds write CVE-2025-20631 |
CWE-787 | Low | 3.9.9.3 | 04.02.2025 |
SB2025020401 SB2025040837 |