9.1
CVE-2026-71933
- EPSS 0.38%
- Veröffentlicht 24.08.2026 17:07:59
- Zuletzt bearbeitet 26.08.2026 17:17:13
- Erkennungen
DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2540xs
Default Statusunaffected
Version
0
Version <
3.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2540xs
Default Statusunaffected
Version
0
Version <
3.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch FX2120
Default Statusunaffected
Version
0
Version <
3.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2282x
Default Statusunaffected
Version
0
Version <
2.10.6
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2282x
Default Statusunaffected
Version
0
Version <
2.10.6
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch Q2300x
Default Statusunaffected
Version
0
Version <
2.10.7
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch PQ2300xb
Default Statusunaffected
Version
0
Version <
2.10.7
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2542x
Default Statusunaffected
Version
0
Version <
3.10.6
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2542x
Default Statusunaffected
Version
0
Version <
3.10.6
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2542xh
Default Statusunaffected
Version
0
Version <
3.10.6
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch PX2060
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G1280
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P1280
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P1281x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G1282
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P1282
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2121
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2121
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch PQ2121x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch Q2121x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2280x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2280x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch Q2200x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch PQ2200xb
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2100
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2100
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch G2540x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
HerstellerDrayTek Corporation
≫
Produkt
VigorSwitch P2540x
Default Statusunaffected
Version
0
Version <
2.9.10
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.38% | 0.306 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| disclosure@vulncheck.com | 8.8 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| disclosure@vulncheck.com | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.draytek.com/about/security-advisory/multiple-vulnerabilities-in-vigorswitch-series-august-2026/
https://www.vulncheck.com/advisories/draytek-vigorswitch-multiple-models-missing-authorization-in-syslog-functions