CVE-2023-1162: falha de alta gravidade em DrayTek Vigor 2960
DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
Publicada em · Atualizada em
26Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 26%
probabilidade de exploração
26%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222258 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
DrayTek · Vigor 2960CVEs relacionadas — DrayTek Vigor 2960
No mesmo produto, das mais perigosas para as menos.
CVE-2023-1009MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversalEPSS 15.7%CVE-2023-1163MEDIUMDrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversalEPSS 1.8%CVE-2022-50994CRITICALDrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgiEPSS 1.4%