719 matches found
CVE-2023-1162
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injectio...
Command injection
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injectio...
Path traversal
UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option...
CVE-2023-1163 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal
UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option...
CVE-2023-1163
CVE-2023-1163 affects DrayTek Vigor 2960 Web Management Interface; vulnerability in function getSyslogFile of mainfunction.cgi allows path traversal, enabling remote access to restricted files. Affected firmware: 1.5.1.4 and 1.5.1.5. Public exploit/disclosure reported. Risk: unauthorized file acc...
CVE-2023-1162 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injectio...
CVE-2023-1162
The CVE concerns DrayTek Vigor 2960 Web Management Interface mainfunction.cgi. Affects versions 1.5.1.4/1.5.1.5; vulnerability arises from inadequate handling of the password argument in the mainfunction.cgi function, enabling remote command injection. Exploitation can be performed remotely, and ...
DrayTek Vigor routers 跨站脚本漏洞
DrayTek Vigor routers are a series of routers from Taiwan-based DrayTek. A security vulnerability exists in DrayTek Vigor routers, which stems from a cross-site scripting XSS vulnerability...
PT-2023-9805 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5 Description: A critical vulnerability has been found in the Web Management Interface of DrayTek Vigor 2960, specifically in the function getSyslogFile of the file mainfunction.cgi. The issue...
PT-2023-9806 · Draytek · Draytek Vigor
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor versions 1.5.1.4 through 1.5.1.5 Description: The issue is related to the function sub 1225C in the mainfunction.cgi script of the DrayTek Vigor web interface, where inadequate data cleaning on the management level can be...
CVE-2023-1163: Improper Limitation of a Pathname to a Restricted Directory
UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option...
PT-2023-18903
Name of the Vulnerable Software and Affected Versions Vigor3910 version 4.3.2.1 Vigor1000B version 4.3.2.1 Vigor2962 version 4.3.2.1 Vigor2865 version 4.4.1.0 Vigor2866 version 4.4.1.0 Vigor2927 version 4.4.2.2 Vigor2915 version 4.4.2.0 Vigor2765 version 4.4.2.0 Vigor2766 version 4.4.2.0 Vigor213...
CVE-2023-1162: Improper Neutralization of Special Elements used in a Command
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injectio...
CVE-2023-1009
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input...
CVE-2023-1009
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input...
Path traversal
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input...
CVE-2023-1009 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input...
CVE-2023-1009 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation of the argument option with the input...
CVE-2023-1009
DrayTek Vigor 2960 Web Management Interface contains a path traversal vulnerability in the function sub_1DF14 of /cgi-bin/mainfunction.cgi. Exploitation arises by manipulating the option argument with the input /../etc/passwd-, enabling remote access to sensitive files. Affected versions are 1.5....
PT-2023-9804 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5 Description: A critical vulnerability has been found in the Web Management Interface of DrayTek Vigor 2960. The issue is related to the function sub 1DF14 of the file...