CVEvulnerability
CVE-2020-14993
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-06-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi.
Affected configurations
• draytek vigor300b firmware (< 1.5.1.1)
• draytek vigor2960 firmware (< 1.5.1.1)
• draytek vigor3900 firmware (< 1.5.1.1)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://github.com/dexterone/Vigor-poc Exploit, Third Party Advisory
- https://www.draytek.com/about/security-advisory Vendor Advisory
- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability-%28cve-2020-14473%29 www.draytek.com
- https://github.com/dexterone/Vigor-poc Exploit, Third Party Advisory
- https://www.draytek.com/about/security-advisory Vendor Advisory
- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability-%28cve-2020-14473%29 www.draytek.com