CVE-2013-5703

2013-10-2222:00:00

mitre

www.cve.org

draytek vigor 2700

remote attackers

arbitrary code

javascript

modify settings

dns cache

crafted ssid.

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

73.5%

JSON

The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js.

References

www.kb.cert.org/vuls/id/101462