The vulnerability of the user_login.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary code.

🗓️ 23 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

DrayTek Vigor router user login interface flaw enables remote arbitrary code execution.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2023-31447	21 Aug 202317:15	–	attackerkb
Circl	CVE-2023-31447	21 Aug 202320:41	–	circl
CNNVD	Draytek Vigor2620 安全漏洞	21 Aug 202300:00	–	cnnvd
CVE	CVE-2023-31447	21 Aug 202300:00	–	cve
Cvelist	CVE-2023-31447	21 Aug 202300:00	–	cvelist
EUVD	EUVD-2023-35755	3 Oct 202520:07	–	euvd
NVD	CVE-2023-31447	21 Aug 202317:15	–	nvd
OSV	CVE-2023-31447	21 Aug 202317:15	–	osv
Prion	Code injection	21 Aug 202317:15	–	prion
Positive Technologies	PT-2023-9807 · Draytek · Draytek Vigor 2925 +1	21 Aug 202300:00	–	ptsecurity

Vulners

Node

draytek vigor_1000bRange<4.3.2.4

OR

draytek vigor_165Range<4.2.5

OR

draytek vigor_166Range<4.2.5

OR

draytek vigor2620_lteRange<3.9.8.4

OR

draytek vigor_lte_200nRange<3.9.8.4

OR

draytek vigor_2133Range<3.9.7

OR

draytek vigor_2135Range<4.4.3

OR

draytek vigor_2762Range<3.9.6.6

OR

draytek vigor_2763Range<4.4.3

OR

draytek vigor_2765Range<4.4.3

OR

draytek vigor_2766Range<4.4.3

OR

draytek vigor_2832Range<3.9.7

OR

draytek vigor_2860Range<3.9.5

OR

draytek vigor_2860_lteRange<3.9.5

OR

draytek vigor_2862Range<3.9.9.2

OR

draytek vigor_2862_lteRange<3.9.9.2

OR

draytek vigor_2865Range<4.4.3.1

OR

draytek vigor_2865_lteRange<4.4.3.1

OR

draytek vigor_2866Range<4.4.3.1

OR

draytek vigor2866_lteRange<4.4.3.1

OR

draytek vigor_2925Range<3.9.5

OR

draytek vigor_2925_lteRange<3.9.5

OR

draytek vigor_2926Range<3.9.9.2

OR

draytek vigor_2926_lteRange<3.9.9.2

OR

draytek vigor_2927Range<4.4.3

OR

draytek vigor2927_lteRange<4.4.3

OR

draytek vigor_2952Range<3.9.8

OR

draytek vigor_2952pRange<3.9.8

OR

draytek vigor_3220Range<3.9.8

OR

draytek vigor_2962Range<4.3.2.4

OR

draytek vigor_3910Range<4.3.2.4

Source	Link
recordedfuture	www.recordedfuture.com/vulnerability-database/CVE-2023-31447
draytek	www.draytek.co.uk/support/security-advisories/kb-advisory-cve-2023-31447
ogma	www.ogma.in/cve-2023-31447-vulnerability-in-draytek-vigor2620-and-vigor2925-devices
web	www.web.nvd.nist.gov/view/vuln/detail

23 Dec 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 39.8

CVSS 210

EPSS0.0086

DrayTek Vigor router user login interface remote code execution code generation flaw web interface vulnerability