1455 matches found
CVE-2020-14472
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file...
CVE-2020-14472
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file...
Command injection
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file...
CVE-2020-14472
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file...
CVE-2020-14472
CVE-2020-14472 affects DrayTek Vigor3900, Vigor2960, and Vigor300B devices prior to version 1.5.1.1. The issue is in the mainfunction.cgi component and enables command injection. This could lead to remote code execution on affected devices, as noted in the advisory context. No exploitation status...
DrayTek Vigor2960, Vigor3900, and Vigor300B Flush Zone Overflow Vulnerability
DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. A buffer overflow vulnerability exists in the DrayTek Vigor2960,...
CVE-2020-14993
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
CVE-2020-14993
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
Stack overflow
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
CVE-2020-14993
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
CVE-2020-14993
CVE-2020-14993 affects DrayTek Vigor2960, Vigor3900, and Vigor300B devices with firmware before 1.5.1.1. The vulnerability is a stack-based buffer overflow in the formuserphonenumber parameter of an authusersms action to mainfunction.cgi, enabling remote code execution. Public exploit status is n...
PT-2020-7000 · Draytek · Draytek Vigor2960 +2
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 versions prior to 1.5.1.1 Draytek Vigor2960 versions prior to 1.5.1.1 Draytek Vigor300B versions prior to 1.5.1.1 Description: The issue concerns command-injection vulnerabilities in the mainfunction.cgi file of the affected...
Draytek VigorAP Cross-Site Scripting Vulnerability
The Draytek VigorAP is an 11ac Wave 2 dual-band wireless mesh access point with port LAN switch. A cross-site scripting vulnerability exists in Draytek VigorAP. An attacker can exploit the vulnerability by injecting their own malicious script code using non-persistent attack vectors to disrupt...
Draytek VigorAP Cross Site Scripting
Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ==================================== 224...
Draytek Vigor Command Injection (CVE-2020-8515)
A command injection vulnerability exists in Draytek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Draytek VigorAP 1000C - Persistent Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-05-07 Vendor: https://www.draytek.com/ Software: https://www.draytek.com/products/vigorap-903/ Product & Service Introduction:...
Draytek VigorAP 1000C - Persistent Cross-Site Scripting
Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-05-07 Vendor: https://www.draytek.com/ Software: https://www.draytek.com/products/vigorap-903/ CVE: N/A Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability...
Draytek VigorAP - (RADIUS) Persistent XSS Vulnerability
Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 224...
PT-2020-6997 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor2960 version 1.5.1 Description: The issue allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi. This is due to the failure to neutralize special elements. Exploitation of the issue m...
Command Injection Vulnerability in DrayTek Vigor Series Routers
The DrayTek Vigor Series routers are dual WAN port security firewall routers designed for mid-sized businesses. A command injection vulnerability exists in the DrayTek Vigor Series routers, which can be exploited by an attacker to execute arbitrary commands to gain privileges on the router...