CVE-2017-11649

Affected product: DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594. Vulnerability: Cross-site request forgery (CSRF) that lets an attacker hijack the authentication of an unspecified user to enable SNMP via requests to goform/setSnmp. Impact (as stated): enables SNMP on the remote...

CVE-2020-28968

The CVE-2020-28968 entry applies to Draytek VigorAP 1000C. A stored XSS vulnerability exists in the RADIUS Setting – RADIUS Server Configuration module, allowing an attacker to execute arbitrary web scripts or HTML via a crafted payload in the username input field. The documents do not specify af...

CVE-2020-3932

CVE-2020-3932 affects the DrayTek VigorAP910C where the SNMP service cannot be disabled, enabling potential information leakage. The NVD entry records CVSSv3.1 base score 7.5 (Network, Low attack complexity, No privileges required, Confidentiality impact High) and CVSSv2 base score 5.0 (Network, ...

CVE-2017-11650

CVE-2017-11650 affects DrayTek Vigor AP910C devices running firmware 1.2.0_RC3 build r6594. The described vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp. Exploitation details beyond the vulnerab...