CVE-2023-31447

CVE-2023-31447 affects DrayTek Vigor2620 (before 3.9.8.4) and all Vigor2925 devices. The vulnerability resides in the web interface script user_login.cgi , where a crafted payload can modify a code segment, insert shellcode, and execute arbitrary code on the device. Public sources confirm the imp...