9.8

CVE-2020-14993

Exploit
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Draytek ≫ Vigor300b Firmware Version < 1.5.1.1
   Draytek ≫ Vigor300b Version-
Draytek ≫ Vigor2960 Firmware Version < 1.5.1.1
   Draytek ≫ Vigor2960 Version-
Draytek ≫ Vigor3900 Firmware Version < 1.5.1.1
   Draytek ≫ Vigor3900 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.64% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://github.com/dexterone/Vigor-poc
Third Party Advisory
Exploit