CVE-2024-51139 Memory corruption in n/a
Remote attackers can execute arbitrary code on DrayTek routers via a buffer overflow in the CGI parser's handling of HTTP POST requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-51139?
CVE-2024-51139 is a critical memory corruption vulnerability in Draytek Vigor3910 Firmware, published on 27 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and Vigor2962/3910 4.3.2.8/4.4.3.1 and earlier and Vigor3912 4.3.6.1 and earlier allows a remote attacker to execute arbitrary code via the CGI parser's handling of the "Content-Length" header of HTTP POST requests.
Weakness: CWE-120
Which versions are affected by CVE-2024-51139?
It affects 23 products.
Products include Draytek Vigor1000b Firmware, Draytek Vigor2133 Firmware, Draytek Vigor2135 Firmware, Draytek Vigor2620 Firmware, Draytek Vigor2762 Firmware, Draytek Vigor2763 Firmware and 17 more.
How do I fix CVE-2024-51139?
No fix has been published for CVE-2024-51139 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-51139 being exploited?
There is no known exploitation of CVE-2024-51139 in the wild and no public exploit code.
Other vulnerabilities in Draytek Vigor3910 Firmware
Sources
Also known as GHSA-jqwh-9m3g-v933.