Buffer Overflow Vulnerability in DrayTek Routers

CVE-2024-51138

Summary

A stack-based buffer overflow vulnerability has been discovered in the URL parsing functionality of the TR069 STUN server within various DrayTek routers. This flaw is due to inadequate bounds checking on URL parameters, potentially leading to an attacker executing arbitrary code with elevated privileges by sending a specially crafted request. This severity underscores the necessity for immediate patching to safeguard affected devices.

References