10
CVE-2022-32548
- EPSS 70.53%
- Veröffentlicht 29.08.2022 06:15:09
- Zuletzt bearbeitet 21.11.2024 07:06:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Draytek ≫ Vigor3910 Firmware Version < 4.3.1.1
Draytek ≫ Vigor1000b Firmware Version < 4.3.1.1
Draytek ≫ Vigor2962 Firmware Version < 4.3.1.1
Draytek ≫ Vigor2962p Firmware Version < 4.3.1.1
Draytek ≫ Vigor2927 Firmware Version < 4.4.0
Draytek ≫ Vigor2927ax Firmware Version < 4.4.0
Draytek ≫ Vigor2927ac Firmware Version < 4.4.0
Draytek ≫ Vigor2927vac Firmware Version < 4.4.0
Draytek ≫ Vigor2927l Firmware Version < 4.4.0
Draytek ≫ Vigor2927lac Firmware Version < 4.4.0
Draytek ≫ Vigor2915 Firmware Version < 4.3.3.2
Draytek ≫ Vigor2915ac Firmware Version < 4.3.3.2
Draytek ≫ Vigor2952 Firmware Version < 3.9.7.2
Draytek ≫ Vigor2952p Firmware Version < 3.9.7.2
Draytek ≫ Vigor3220 Firmware Version < 3.9.7.2
Draytek ≫ Vigor2926 Firmware Version < 3.9.8.1
Draytek ≫ Vigor2926n Firmware Version < 3.9.8.1
Draytek ≫ Vigor2926ac Firmware Version < 3.9.8.1
Draytek ≫ Vigor2926vac Firmware Version < 3.9.8.1
Draytek ≫ Vigor2926l Firmware Version < 3.9.8.1
Draytek ≫ Vigor2926ln Firmware Version < 3.9.8.1
Draytek ≫ Vigor2926lac Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862 Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862n Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862ac Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862vac Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862b Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862bn Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862l Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862ln Firmware Version < 3.9.8.1
Draytek ≫ Vigor2862lac Firmware Version < 3.9.8.1
Draytek ≫ Vigor2620l Firmware Version < 3.9.8.1
Draytek ≫ Vigor2620ln Firmware Version < 3.9.8.1
Draytek ≫ Vigorlte 200n Firmware Version < 3.9.8.1
Draytek ≫ Vigor2133 Firmware Version < 3.9.6.4
Draytek ≫ Vigor2133n Firmware Version < 3.9.6.4
Draytek ≫ Vigor2133ac Firmware Version < 3.9.6.4
Draytek ≫ Vigor2133vac Firmware Version < 3.9.6.4
Draytek ≫ Vigor2133fvac Firmware Version < 3.9.6.4
Draytek ≫ Vigor2762 Firmware Version < 3.9.6.4
Draytek ≫ Vigor2762n Firmware Version < 3.9.6.4
Draytek ≫ Vigor2762ac Firmware Version < 3.9.6.4
Draytek ≫ Vigor2762vac Firmware Version < 3.9.6.4
Draytek ≫ Vigor165 Firmware Version < 4.2.4
Draytek ≫ Vigor166 Firmware Version < 4.2.4
Draytek ≫ Vigor2135 Firmware Version < 4.4.2
Draytek ≫ Vigor2135ac Firmware Version < 4.4.2
Draytek ≫ Vigor2135vac Firmware Version < 4.4.2
Draytek ≫ Vigor2135fvac Firmware Version < 4.4.2
Draytek ≫ Vigor2765 Firmware Version < 4.4.2
Draytek ≫ Vigor2765ac Firmware Version < 4.4.2
Draytek ≫ Vigor2765vac Firmware Version < 4.4.2
Draytek ≫ Vigor2766 Firmware Version < 4.4.2
Draytek ≫ Vigor2766ac Firmware Version < 4.4.2
Draytek ≫ Vigor2766vac Firmware Version < 4.4.2
Draytek ≫ Vigor2832 Firmware Version < 3.9.6
Draytek ≫ Vigor2865 Firmware Version < 4.4.0
Draytek ≫ Vigor2865ax Firmware Version < 4.4.0
Draytek ≫ Vigor2865ac Firmware Version < 4.4.0
Draytek ≫ Vigor2865vac Firmware Version < 4.4.0
Draytek ≫ Vigor2865l Firmware Version < 4.4.0
Draytek ≫ Vigor2865lac Firmware Version < 4.4.0
Draytek ≫ Vigor2866 Firmware Version < 4.4.0
Draytek ≫ Vigor2866ax Firmware Version < 4.4.0
Draytek ≫ Vigor2866ac Firmware Version < 4.4.0
Draytek ≫ Vigor2866vac Firmware Version < 4.4.0
Draytek ≫ Vigor2866l Firmware Version < 4.4.0
Draytek ≫ Vigor2866lac Firmware Version < 4.4.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 70.53% | 0.987 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| cve@mitre.org | 10 | 3.9 | 6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.