CVE-2023-31447

2023-08-2100:00:00

mitre

www.cve.org

user_login.cgi

draytek vigor2620

vigor2925

vulnerability

code segment

shellcode

arbitrary code

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.

References

draytek.com

gist.github.com/rrrrrrri/013c9eef64b265af4163478bfcf29ff4