Draytek الثغرات

التسلسل الزمني

النوع

منتج

DrayTek Vigor296014
DrayTek Vigor390011
DrayTek Vigor300B11
Draytek VigorConnect7
DrayTek Vigor 29605

معالجة

Official Fix13
Temporary Fix0
Workaround0
Unavailable1
Not Defined27

قابلية الاستغلال

High1
Functional0
Proof-of-Concept3
Unproven0
Not Defined37

متجه الوصول

Not Defined0
Physical0
Local0
Adjacent9
Network32

توثيق

Not Defined0
High1
Low17
None23

تفاعل المستخدم

Not Defined0
Required7
None34

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤54
≤67
≤710
≤84
≤911
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤54
≤68
≤79
≤84
≤911
≤101

VulDB

≤10
≤20
≤30
≤44
≤58
≤67
≤78
≤813
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤75
≤82
≤93
≤1014

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤73
≤80
≤90
≤101

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k4
<2k18
<5k18
<10k0
<25k0
<50k0
<100k1
≥100k0

إكسبلويت اليوم

<1k36
<2k4
<5k0
<10k0
<25k0
<50k0
<100k1
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (30): Access Point (1), Myvigor (1), Router (1), Vigor (1), Vigor167 (1), Vigor 300B (2), Vigor300B (11), Vigor 1000B (1), Vigor 2135 (1), Vigor 2620 (1), Vigor 2700 router (1), Vigor 2762 (1), Vigor 2766 (1), Vigor 2866 (1), Vigor 2925 (1), Vigor2925 (2), Vigor 2926 (1), Vigor2960 (14), Vigor 2960 (5), Vigor 2962 (1), Vigor 3220 (1), Vigor 3900 (2), Vigor3900 (11), Vigor3910 (2), VigorAP910C (1), Vigor AP910C (2), VigorAP 1000C (1), VigorConnect (7), Vigor Router (1), WebSite (1)

منشورBaseTempالثغرةProdق�معالجةEPSSCTICVE
21/03/20245.55.5Draytek Vigor3910 POST Request process_post اجتياز الدليلRouter Operating SystemNot DefinedNot Defined0.000430.05CVE-2024-23721
09/12/20238.07.9DrayTek Vigor167 CLI تجاوز الصلاحياتRouter Operating SystemNot DefinedNot Defined0.001850.04CVE-2023-47254
22/11/20236.76.6DrayTek Vigor2960 Web Management Interface mainfunction.cgi dumpSyslog اجتياز الدليلRouter Operating SystemNot DefinedNot Defined0.000470.00CVE-2023-6265
22/08/20235.55.3Draytek Vigor 2620/Vigor 2925 user_login.cgi تلف الذاكرةRouter Operating SystemNot DefinedOfficial Fix0.001340.00CVE-2023-31447
01/06/20237.27.1Draytek Vigor Router/Access Point/Myvigor تشفير ضعيفRouter Operating SystemNot DefinedOfficial Fix0.000610.05CVE-2023-33778
15/03/20236.66.5DrayTek Vigor2960 mainfunction.cgi تجاوز الصلاحياتRouter Operating SystemNot DefinedNot Defined0.000420.02CVE-2023-24229
04/03/20233.53.5DrayTek Vigor 2762 Web Application Management Portal wlogin.cgi سكربتات مشتركةRouter Operating SystemNot DefinedNot Defined0.000750.03CVE-2023-23313
25/02/20235.85.7DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile اجتياز الدليلRouter Operating SystemProof-of-ConceptNot Defined0.002370.08CVE-2023-1163
25/02/20237.47.3DrayTek Vigor 2960 Web Management Interface mainfunction.cgi تجاوز الصلاحياتRouter Operating SystemProof-of-ConceptNot Defined0.002730.04CVE-2023-1162
18/02/20236.26.1DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 اجتياز الدليلRouter Operating SystemProof-of-ConceptNot Defined0.000450.08CVE-2023-1009

31 بعض الادخالات لم يتم عرضها

Interested in the pricing of exploits?

See the underground prices here!