user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.
References
Link | Resource |
---|---|
https://draytek.com | Product |
https://gist.github.com/rrrrrrri/013c9eef64b265af4163478bfcf29ff4 | Third Party Advisory |
https://draytek.com | Product |
https://gist.github.com/rrrrrrri/013c9eef64b265af4163478bfcf29ff4 | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:01
Type | Values Removed | Values Added |
---|---|---|
References | () https://draytek.com - Product | |
References | () https://gist.github.com/rrrrrrri/013c9eef64b265af4163478bfcf29ff4 - Third Party Advisory |
07 Oct 2024, 19:36
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-94 |
30 Aug 2023, 20:50
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:draytek:vigor2620_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:draytek:vigor2625:-:*:*:*:*:*:*:* cpe:2.3:o:draytek:vigor2625_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:draytek:vigor2620:-:*:*:*:*:*:*:* |
|
CWE | NVD-CWE-noinfo | |
References | (MISC) https://gist.github.com/rrrrrrri/013c9eef64b265af4163478bfcf29ff4 - Third Party Advisory | |
References | (MISC) https://draytek.com - Product | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Draytek vigor2620
Draytek Draytek vigor2625 Draytek vigor2620 Firmware Draytek vigor2625 Firmware |
21 Aug 2023, 18:35
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-21 17:15
Updated : 2024-11-21 08:01
NVD link : CVE-2023-31447
Mitre link : CVE-2023-31447
CVE.ORG link : CVE-2023-31447
JSON object : View
Products Affected
draytek
- vigor2625_firmware
- vigor2620_firmware
- vigor2625
- vigor2620
CWE