CVE-2024-41594 Weak cryptography in n/a
Attackers can obtain sensitive information from DrayTek Vigor310 routers due to weak PRNG seeding in the management UI's httpd server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-41594?
CVE-2024-41594 is a high-severity vulnerability in Draytek Vigor3910 Firmware, published on 3 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.
Weakness: CWE-326
Which versions are affected by CVE-2024-41594?
It affects 24 products.
Products include Draytek Vigor1000b Firmware, Draytek Vigor165 Firmware, Draytek Vigor166 Firmware, Draytek Vigor2133 Firmware, Draytek Vigor2135 Firmware, Draytek Vigor2620 Firmware and 18 more.
How do I fix CVE-2024-41594?
No fix has been published for CVE-2024-41594 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-41594 being exploited?
There is no known exploitation of CVE-2024-41594 in the wild and no public exploit code.
Other vulnerabilities in Draytek Vigor3910 Firmware
Sources
Also known as GHSA-g7f6-jj92-wc77.