Back to Database
Status published
Critical
CVE-2022-32548
An issue was discovered on certain DrayTek Vigor routers before...
Vulnerability Description
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-32548
Credits & Attribution
No credits recorded in the NVD database.
References
More from draytek
View All →CVE-2021-43118
A Remote Command Injection vulnerability exists in DrayTek Vigor 2960...
Critical
9.8
CVE-2021-42911
A Format String vulnerability exists in DrayTek Vigor 2960 <=...
Critical
9.8
CVE-2020-8515
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and...
Unknown
0
CVE-2020-28968
Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability...
Medium
5.4
CVE-2020-19664
DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters...
High
8.8
Affected Vendor
draytek
View all reports →Affected Software
vigor3910 firmware, vigor1000b firmware, vigor2962 firmware, vigor2962p firmware, vigor2927 firmware, vigor2927ax firmware, vigor2927ac firmware, vigor2927vac firmware, vigor2927l firmware, vigor2927lac firmware, vigor2915 firmware, vigor2915ac firmware, vigor2952 firmware, vigor2952p firmware, vigor3220 firmware, vigor2926 firmware, vigor2926n firmware, vigor2926ac firmware, vigor2926vac firmware, vigor2926l firmware, vigor2926ln firmware, vigor2926lac firmware, vigor2862 firmware, vigor2862n firmware, vigor2862ac firmware, vigor2862vac firmware, vigor2862b firmware, vigor2862bn firmware, vigor2862l firmware, vigor2862ln firmware, vigor2862lac firmware, vigor2620l firmware, vigor2620ln firmware, vigorlte 200n firmware, vigor2133 firmware, vigor2133n firmware, vigor2133ac firmware, vigor2133vac firmware, vigor2133fvac firmware, vigor2762 firmware, vigor2762n firmware, vigor2762ac firmware, vigor2762vac firmware, vigor165 firmware, vigor166 firmware, vigor2135 firmware, vigor2135ac firmware, vigor2135vac firmware, vigor2135fvac firmware, vigor2765 firmware, vigor2765ac firmware, vigor2765vac firmware, vigor2766 firmware, vigor2766ac firmware, vigor2766vac firmware, vigor2832 firmware, vigor2865 firmware, vigor2865ax firmware, vigor2865ac firmware, vigor2865vac firmware, vigor2865l firmware, vigor2865lac firmware, vigor2866 firmware, vigor2866ax firmware, vigor2866ac firmware, vigor2866vac firmware, vigor2866l firmware, vigor2866lac firmware
Vulnerable Versions:
0
Timeline
Official Publish:
August 29th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.