CVE-2019-16533

On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...

CVE-2019-16533

On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...

CVE-2019-16533

The CVE-2019-16533 entry concerns DrayTek Vigor2925 devices with firmware 3.8.4.3. The flaw is an Incorrect Access Control in loginset.htm that can be triggered to perform Cross-Site Scripting (XSS). Affected product is explicitly named, and the default vulnerability description is consistent acr...

PT-2019-14691

Name of the Vulnerable Software and Affected Versions DrayTek Vigor2925 version 3.8.4.3 Description The issue is related to Incorrect Access Control in the loginset.htm page, which can be exploited to trigger a Cross-Site Scripting XSS attack. Recommendations For DrayTek Vigor2925 version 3.8.4.3...

CVE-2019-16533: Improper Neutralization of Input During Web Page Generation

On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...