Draytek Vulnerabilità

Sequenza temporale

Genere

Prodotto

DrayTek Vigor296014
DrayTek Vigor390011
DrayTek Vigor300B11
Draytek VigorConnect7
DrayTek Vigor 29605

Contromisure

Official Fix13
Temporary Fix0
Workaround0
Unavailable1
Not Defined27

Sfruttabilità

High1
Functional0
Proof-of-Concept3
Unproven0
Not Defined37

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent9
Network32

Autenticazione

Not Defined0
High1
Low17
None23

Interazione dell'utente

Not Defined0
Required7
None34

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤54
≤67
≤710
≤84
≤911
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤54
≤68
≤79
≤84
≤911
≤101

VulDB

≤10
≤20
≤30
≤44
≤58
≤67
≤78
≤813
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤75
≤82
≤93
≤1014

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤73
≤80
≤90
≤101

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k4
<2k18
<5k18
<10k0
<25k0
<50k0
<100k1
≥100k0

Exploiter aujourd'hui

<1k36
<2k4
<5k0
<10k0
<25k0
<50k0
<100k1
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (30): Access Point (1), Myvigor (1), Router (1), Vigor (1), Vigor167 (1), Vigor 300B (2), Vigor300B (11), Vigor 1000B (1), Vigor 2135 (1), Vigor 2620 (1), Vigor 2700 router (1), Vigor 2762 (1), Vigor 2766 (1), Vigor 2866 (1), Vigor 2925 (1), Vigor2925 (2), Vigor 2926 (1), Vigor2960 (14), Vigor 2960 (5), Vigor 2962 (1), Vigor 3220 (1), Vigor 3900 (2), Vigor3900 (11), Vigor3910 (2), VigorAP910C (1), Vigor AP910C (2), VigorAP 1000C (1), VigorConnect (7), Vigor Router (1), WebSite (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
21/03/20245.55.5Draytek Vigor3910 POST Request process_post directory traversalRouter Operating SystemNot DefinedNot Defined0.000430.03CVE-2024-23721
09/12/20238.07.9DrayTek Vigor167 CLI escalazione di privilegiRouter Operating SystemNot DefinedNot Defined0.001850.04CVE-2023-47254
22/11/20236.76.6DrayTek Vigor2960 Web Management Interface mainfunction.cgi dumpSyslog directory traversalRouter Operating SystemNot DefinedNot Defined0.000470.00CVE-2023-6265
22/08/20235.55.3Draytek Vigor 2620/Vigor 2925 user_login.cgi buffer overflowRouter Operating SystemNot DefinedOfficial Fix0.001340.00CVE-2023-31447
01/06/20237.27.1Draytek Vigor Router/Access Point/Myvigor crittografia deboleRouter Operating SystemNot DefinedOfficial Fix0.000610.04CVE-2023-33778
15/03/20236.66.5DrayTek Vigor2960 mainfunction.cgi escalazione di privilegiRouter Operating SystemNot DefinedNot Defined0.000420.02CVE-2023-24229
04/03/20233.53.5DrayTek Vigor 2762 Web Application Management Portal wlogin.cgi cross site scriptingRouter Operating SystemNot DefinedNot Defined0.000750.03CVE-2023-23313
25/02/20235.85.7DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile directory traversalRouter Operating SystemProof-of-ConceptNot Defined0.002370.05CVE-2023-1163
25/02/20237.47.3DrayTek Vigor 2960 Web Management Interface mainfunction.cgi escalazione di privilegiRouter Operating SystemProof-of-ConceptNot Defined0.002730.00CVE-2023-1162
18/02/20236.26.1DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 directory traversalRouter Operating SystemProof-of-ConceptNot Defined0.000450.05CVE-2023-1009

31 non vengono visualizzate più voci

Do you need the next level of professionalism?

Upgrade your account now!