26 matches found
Design/Logic Flaw
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
Information disclosure
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
CVE-2019-16534
CVE-2019-16534 affects DrayTek Vigor2925 devices running firmware 3.8.4.3, where an XSS flaw can be triggered by a crafted WAN name on the General Setup screen. The vulnerability is tied to an end-of-life product. The provided sources describe the existence of the XSS but do not specify the under...
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
CVE-2019-16533
The CVE-2019-16533 entry concerns DrayTek Vigor2925 devices with firmware 3.8.4.3. The flaw is an Incorrect Access Control in loginset.htm that can be triggered to perform Cross-Site Scripting (XSS). Affected product is explicitly named, and the default vulnerability description is consistent acr...