Vigor2135Ac Firmware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33778 Jun 01, 04:15 CRITICAL POC Act Now

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Vigor166 Firmware Vigor2962 Firmware Vigor3910 Firmware Vigor165 Firmware +69

NVD GitHub

CVSS 3.1

9.8

EPSS

0.6%

CVE-2023-23313 Mar 03, 22:15 MEDIUM This Month

Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Vigor166 Firmware Vigor2860 Firmware Vigor2925 Firmware Vigor2862 Firmware +88

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2022-32548 Aug 29, 06:15 CRITICAL POC THREAT Act Now

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Vigor166 Firmware Vigor2862 Firmware Vigor2926 Firmware Vigor2133 Firmware +65

NVD

CVSS 3.1

9.8

EPSS

33.8%

CVE-2023-33778

EPSS 1% CVSS 9.8

CRITICAL POC Act Now

Authentication Bypass Vigor166 Firmware Vigor2962 Firmware +71

NVD GitHub

CVE-2023-23313

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Vigor166 Firmware Vigor2860 Firmware +90

NVD

CVE-2022-32548

EPSS 34% CVSS 9.8

CRITICAL POC THREAT Act Now

Buffer Overflow Vigor166 Firmware Vigor2862 Firmware +67

NVD