1740 matches found
CVE-2020-14993
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
CVE-2020-14993: Out-of-bounds Write
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
PT-2020-7000 · Draytek · Draytek Vigor2960 +2
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 versions prior to 1.5.1.1 Draytek Vigor2960 versions prior to 1.5.1.1 Draytek Vigor300B versions prior to 1.5.1.1 Description: The issue concerns command-injection vulnerabilities in the mainfunction.cgi file of the affected...
Draytek VigorAP Cross-Site Scripting Vulnerability
The Draytek VigorAP is an 11ac Wave 2 dual-band wireless mesh access point with port LAN switch. A cross-site scripting vulnerability exists in Draytek VigorAP. An attacker can exploit the vulnerability by injecting their own malicious script code using non-persistent attack vectors to disrupt...
Draytek VigorAP Cross Site Scripting
Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-07 Vulnerability Laboratory ID VL-ID: ==================================== 224...
Draytek Vigor Command Injection (CVE-2020-8515)
A command injection vulnerability exists in Draytek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Draytek VigorAP 1000C - Persistent Cross-Site Scripting Vulnerability
Exploit for hardware platform in category web applications Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-05-07 Vendor: https://www.draytek.com/ Software: https://www.draytek.com/products/vigorap-903/ Product & Service Introduction:...
Draytek VigorAP 1000C - Persistent Cross-Site Scripting
Title: Draytek VigorAP 1000C - Persistent Cross-Site Scripting Author: Vulnerability Laboratory Date: 2020-05-07 Vendor: https://www.draytek.com/ Software: https://www.draytek.com/products/vigorap-903/ CVE: N/A Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability...
Draytek VigorAP - (RADIUS) Persistent XSS Vulnerability
Document Title: =============== Draytek VigorAP - RADIUS Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2244 Release Date: ============= 2020-05-06 Vulnerability Laboratory ID VL-ID: ==================================== 224...
PT-2020-6997 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor2960 version 1.5.1 Description: The issue allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi. This is due to the failure to neutralize special elements. Exploitation of the issue m...
Command Injection Vulnerability in DrayTek Vigor Series Routers
The DrayTek Vigor Series routers are dual WAN port security firewall routers designed for mid-sized businesses. A command injection vulnerability exists in the DrayTek Vigor Series routers, which can be exploited by an attacker to execute arbitrary commands to gain privileges on the router...
DrayTek Vigor Detection (FTP)
Detection of DrayTek Vigor devices via FTP. The script attempts to identify a DrayTek Vigor device via a FTP banner. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GN...
DrayTek Vigor Detection (Telnet)
Telnet based detection of DrayTek Vigor devices. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Draytek VigorAP910C Information Disclosure Vulnerability
The DrayTek Draytek VigorAP910C is a wireless access point AP from DrayTek Taiwan, China. A security vulnerability exists in the Draytek VigorAP910C version 1.3.1. An attacker can exploit the vulnerability to obtain sensitive information...
CVE-2020-3932
A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...
CVE-2020-3932
A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...
Design/Logic Flaw
A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...
CVE-2020-3932 Draytek VigorAP910C - Information Leakage
A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage...
CVE-2020-3932
CVE-2020-3932 affects the DrayTek VigorAP910C where the SNMP service cannot be disabled, enabling potential information leakage. The NVD entry records CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges required, Confidentiality impact High) and CVSSv2 base score 5.0 (Network, ...