CVE-2022-32548

🗓️ 29 Aug 2022 05:38:35Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 400 Views🌐 WEB

An issue discovered on certain DrayTek Vigor routers before July 2022, allowing buffer overflow via login credentials

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Classic Buffer Overflow in Draytek Vigor3910_Firmware	27 Oct 202308:58	–	githubexploit
ATTACKERKB	CVE-2022-32548	29 Aug 202206:15	–	attackerkb
Circl	CVE-2022-32548	4 Aug 202215:13	–	circl
CNNVD	DrayTek Vigor routers 安全漏洞	29 Aug 202200:00	–	cnnvd
Check Point Advisories	DrayTek Routers Buffer Overflow (CVE-2022-32548)	16 Aug 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-32548	29 Aug 202205:38	–	cvelist
NCSC	Vulnerability fixed in DrayTek Vigor routers	4 Aug 202200:00	–	ncsc
NVD	CVE-2022-32548	29 Aug 202206:15	–	nvd
Prion	Buffer overflow	29 Aug 202206:15	–	prion
Positive Technologies	PT-2022-3971 · Draytek · Draytek Vigor	3 Aug 202200:00	–	ptsecurity

NVD

Node

draytek vigor3910_firmwareRange<4.3.1.1

AND

draytek vigor3910Match-

Node

draytek vigor1000b_firmwareRange<4.3.1.1

AND

draytek vigor1000bMatch-

Node

draytek vigor2962_firmwareRange<4.3.1.1

AND

draytek vigor2962Match-

Node

draytek vigor2962p_firmwareRange<4.3.1.1

AND

draytek vigor2962pMatch-

Node

draytek vigor2927_firmwareRange<4.4.0

AND

draytek vigor2927Match-

Node

draytek vigor2927ax_firmwareRange<4.4.0

AND

draytek vigor2927axMatch-

Node

draytek vigor2927ac_firmwareRange<4.4.0

AND

draytek vigor2927acMatch-

Node

draytek vigor2927vac_firmwareRange<4.4.0

AND

draytek vigor2927vacMatch-

Node

draytek vigor2927l_firmwareRange<4.4.0

AND

draytek vigor2927lMatch-

Node

draytek vigor2927lac_firmwareRange<4.4.0

AND

draytek vigor2927lacMatch-

Node

draytek vigor2915_firmwareRange<4.3.3.2

AND

draytek vigor2915Match-

Node

draytek vigor2915ac_firmwareRange<4.3.3.2

AND

draytek vigor2915acMatch-

Node

draytek vigor2952_firmwareRange<3.9.7.2

AND

draytek vigor2952Match-

Node

draytek vigor2952p_firmwareRange<3.9.7.2

AND

draytek vigor2952pMatch-

Node

draytek vigor3220_firmwareRange<3.9.7.2

AND

draytek vigor3220Match-

Node

draytek vigor2926_firmwareRange<3.9.8.1

AND

draytek vigor2926Match-

Node

draytek vigor2926n_firmwareRange<3.9.8.1

AND

draytek vigor2926nMatch-

Node

draytek vigor2926ac_firmwareRange<3.9.8.1

AND

draytek vigor2926acMatch-

Node

draytek vigor2926vac_firmwareRange<3.9.8.1

AND

draytek vigor2926vacMatch-

Node

draytek vigor2926l_firmwareRange<3.9.8.1

AND

draytek vigor2926lMatch-

Node

draytek vigor2926ln_firmwareRange<3.9.8.1

AND

draytek vigor2926lnMatch-

Node

draytek vigor2926lac_firmwareRange<3.9.8.1

AND

draytek vigor2926lacMatch-

Node

draytek vigor2862_firmwareRange<3.9.8.1

AND

draytek vigor2862Match-

Node

draytek vigor2862n_firmwareRange<3.9.8.1

AND

draytek vigor2862nMatch-

Node

draytek vigor2862ac_firmwareRange<3.9.8.1

AND

draytek vigor2862acMatch-

Node

draytek vigor2862vac_firmwareRange<3.9.8.1

AND

draytek vigor2862vacMatch-

Node

draytek vigor2862b_firmwareRange<3.9.8.1

AND

draytek vigor2862bMatch-

Node

draytek vigor2862bn_firmwareRange<3.9.8.1

AND

draytek vigor2862bnMatch-

Node

draytek vigor2862l_firmwareRange<3.9.8.1

AND

draytek vigor2862lMatch-

Node

draytek vigor2862ln_firmwareRange<3.9.8.1

AND

draytek vigor2862lnMatch-

Node

draytek vigor2862lac_firmwareRange<3.9.8.1

AND

draytek vigor2862lacMatch-

Node

draytek vigor2620l_firmwareRange<3.9.8.1

AND

draytek vigor2620lMatch-

Node

draytek vigor2620ln_firmwareRange<3.9.8.1

AND

draytek vigor2620lnMatch-

Node

draytek vigorlte_200n_firmwareRange<3.9.8.1

AND

draytek vigorlte_200nMatch-

Node

draytek vigor2133_firmwareRange<3.9.6.4

AND

draytek vigor2133Match-

Node

draytek vigor2133n_firmwareRange<3.9.6.4

AND

draytek vigor2133nMatch-

Node

draytek vigor2133ac_firmwareRange<3.9.6.4

AND

draytek vigor2133acMatch-

Node

draytek vigor2133vac_firmwareRange<3.9.6.4

AND

draytek vigor2133vacMatch-

Node

draytek vigor2133fvac_firmwareRange<3.9.6.4

AND

draytek vigor2133fvacMatch-

Node

draytek vigor2762_firmwareRange<3.9.6.4

AND

draytek vigor2762Match-

Node

draytek vigor2762n_firmwareRange<3.9.6.4

AND

draytek vigor2762nMatch-

Node

draytek vigor2762ac_firmwareRange<3.9.6.4

AND

draytek vigor2762acMatch-

Node

draytek vigor2762vac_firmwareRange<3.9.6.4

AND

draytek vigor2762vacMatch-

Node

draytek vigor165_firmwareRange<4.2.4

AND

draytek vigor165Match-

Node

draytek vigor166_firmwareRange<4.2.4

AND

draytek vigor166Match-

Node

draytek vigor2135_firmwareRange<4.4.2

AND

draytek vigor2135Match-

Node

draytek vigor2135ac_firmwareRange<4.4.2

AND

draytek vigor2135acMatch-

Node

draytek vigor2135vac_firmwareRange<4.4.2

AND

draytek vigor2135vacMatch-

Node

draytek vigor2135fvac_firmwareRange<4.4.2

AND

draytek vigor2135fvacMatch-

Node

draytek vigor2765_firmwareRange<4.4.2

AND

draytek vigor2765Match-

Node

draytek vigor2765ac_firmwareRange<4.4.2

AND

draytek vigor2765acMatch-

Node

draytek vigor2765vac_firmwareRange<4.4.2

AND

draytek vigor2765vacMatch-

Node

draytek vigor2766_firmwareRange<4.4.2

AND

draytek vigor2766Match-

Node

draytek vigor2766ac_firmwareRange<4.4.2

AND

draytek vigor2766acMatch-

Node

draytek vigor2766vac_firmwareRange<4.4.2

AND

draytek vigor2766vacMatch-

Node

draytek vigor2832_firmwareRange<3.9.6

AND

draytek vigor2832Match-

Node

draytek vigor2865_firmwareRange<4.4.0

AND

draytek vigor2865Match-

Node

draytek vigor2865ax_firmwareRange<4.4.0

AND

draytek vigor2865axMatch-

Node

draytek vigor2865ac_firmwareRange<4.4.0

AND

draytek vigor2865acMatch-

Node

draytek vigor2865vac_firmwareRange<4.4.0

AND

draytek vigor2865vacMatch-

Node

draytek vigor2865l_firmwareRange<4.4.0

AND

draytek vigor2865lMatch-

Node

draytek vigor2865lac_firmwareRange<4.4.0

AND

draytek vigor2865lacMatch-

Node

draytek vigor2866_firmwareRange<4.4.0

AND

draytek vigor2866Match-

Node

draytek vigor2866ax_firmwareRange<4.4.0

AND

draytek vigor2866axMatch-

Node

draytek vigor2866ac_firmwareRange<4.4.0

AND

draytek vigor2866acMatch-

Node

draytek vigor2866vac_firmwareRange<4.4.0

AND

draytek vigor2866vacMatch-

Node

draytek vigor2866l_firmwareRange<4.4.0

AND

draytek vigor2866lMatch-

Node

draytek vigor2866lac_firmwareRange<4.4.0

AND

draytek vigor2866lacMatch-

Source	Link
trellix	www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html
securityweek	www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers

Parameter	Position	Path	Description	CWE
aa	request body	/cgi-bin/wlogin.cgi	Buffer overflow on login page /cgi-bin/wlogin.cgi via crafted base64-encoded aa/ab fields enabling unauthenticated RCE (CVE-2022-32548)	CWE-120
ab	request body	/cgi-bin/wlogin.cgi	Buffer overflow on login page /cgi-bin/wlogin.cgi via crafted base64-encoded aa/ab fields enabling unauthenticated RCE (CVE-2022-32548)	CWE-120

21 Nov 2024 07:06Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8 - 10

EPSS0.65569

CWE-120