CVEvulnerability

CVE-2022-32548

9.8 CRITICAL Published 2022-08-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

Affected configurations

• draytek vigor3910 firmware (< 4.3.1.1) • draytek vigor1000b firmware (< 4.3.1.1) • draytek vigor2962 firmware (< 4.3.1.1) • draytek vigor2962p firmware (< 4.3.1.1) • draytek vigor2927 firmware (< 4.4.0) • draytek vigor2927ax firmware (< 4.4.0) • draytek vigor2927ac firmware (< 4.4.0) • draytek vigor2927vac firmware (< 4.4.0) • draytek vigor2927l firmware (< 4.4.0) • draytek vigor2927lac firmware (< 4.4.0) • draytek vigor2915 firmware (< 4.3.3.2) • draytek vigor2915ac firmware (< 4.3.3.2) • draytek vigor2952 firmware (< 3.9.7.2) • draytek vigor2952p firmware (< 3.9.7.2) • draytek vigor3220 firmware (< 3.9.7.2) • draytek vigor2926 firmware (< 3.9.8.1) • draytek vigor2926n firmware (< 3.9.8.1) • draytek vigor2926ac firmware (< 3.9.8.1) • draytek vigor2926vac firmware (< 3.9.8.1) • draytek vigor2926l firmware (< 3.9.8.1) • draytek vigor2926ln firmware (< 3.9.8.1) • draytek vigor2926lac firmware (< 3.9.8.1) • draytek vigor2862 firmware (< 3.9.8.1) • draytek vigor2862n firmware (< 3.9.8.1) • draytek vigor2862ac firmware (< 3.9.8.1) • draytek vigor2862vac firmware (< 3.9.8.1) • draytek vigor2862b firmware (< 3.9.8.1) • draytek vigor2862bn firmware (< 3.9.8.1) • draytek vigor2862l firmware (< 3.9.8.1) • draytek vigor2862ln firmware (< 3.9.8.1) • draytek vigor2862lac firmware (< 3.9.8.1) • draytek vigor2620l firmware (< 3.9.8.1) • draytek vigor2620ln firmware (< 3.9.8.1) • draytek vigorlte 200n firmware (< 3.9.8.1) • draytek vigor2133 firmware (< 3.9.6.4) • draytek vigor2133n firmware (< 3.9.6.4) • draytek vigor2133ac firmware (< 3.9.6.4) • draytek vigor2133vac firmware (< 3.9.6.4) • draytek vigor2133fvac firmware (< 3.9.6.4) • draytek vigor2762 firmware (< 3.9.6.4) • draytek vigor2762n firmware (< 3.9.6.4) • draytek vigor2762ac firmware (< 3.9.6.4) • draytek vigor2762vac firmware (< 3.9.6.4) • draytek vigor165 firmware (< 4.2.4) • draytek vigor166 firmware (< 4.2.4) • draytek vigor2135 firmware (< 4.4.2) • draytek vigor2135ac firmware (< 4.4.2) • draytek vigor2135vac firmware (< 4.4.2) • draytek vigor2135fvac firmware (< 4.4.2) • draytek vigor2765 firmware (< 4.4.2) • draytek vigor2765ac firmware (< 4.4.2) • draytek vigor2765vac firmware (< 4.4.2) • draytek vigor2766 firmware (< 4.4.2) • draytek vigor2766ac firmware (< 4.4.2) • draytek vigor2766vac firmware (< 4.4.2) • draytek vigor2832 firmware (< 3.9.6) • draytek vigor2865 firmware (< 4.4.0) • draytek vigor2865ax firmware (< 4.4.0) • draytek vigor2865ac firmware (< 4.4.0) • draytek vigor2865vac firmware (< 4.4.0) … and 8 more

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References