Known vulnerabilities in Vigor 166

Vendor: DrayTek Corp.
Software: Vigor 166
Software CPE: cpe:2.3:h:draytek_corp:vigor_166:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vigor 166 Vigor 166 is affected by 15 known vulnerabilities: 1 critical, 1 high, 3 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-41585		 CWE-78 Medium
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97985 - Credentials Management
CVE-2024-41589		 CWE-255 Medium
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97983 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2024-41594		 CWE-338 Medium
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97982 - Memory corruption
CVE-2024-41595		 CWE-119 Low
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97981 - Memory corruption
CVE-2024-41586		 CWE-119 Low
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97980 - Memory corruption
CVE-2024-41596		 CWE-119 Low
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97978 - Memory corruption
CVE-2024-41593		 CWE-119 Low
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97977 - Memory corruption
CVE-2024-41590		 CWE-119 Low
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97976 - Memory corruption
CVE-2024-41588		 CWE-119 Low
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97975 - Memory corruption
CVE-2024-41592		 CWE-119 Critical
No
No
 4.2.7 03.10.2024 SB2024100306
#VU97969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41584		 CWE-79 Low
No
No
 4.2.7 02.10.2024 SB2024100306
#VU97968 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41591		 CWE-79 Low
No
No
 4.2.7 02.10.2024 SB2024100306
#VU97967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41587		 CWE-79 Low
No
No
 4.2.7 02.10.2024 SB2024100306
#VU97966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41583		 CWE-79 Low
No
No
 4.2.7 02.10.2024 SB2024100306
#VU66126 - Memory corruption
CVE-2022-32548		 CWE-119 High
No
No
 4.2.4 05.08.2022 SB2022080516