Unrated severityNVD Advisory· Published Aug 29, 2022· Updated Aug 3, 2024

CVE-2022-32548

Description

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Draytek/Vigor 2700 Routercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: before July 2022
Draytek/Vigor3910llm-fuzzy
Range: <4.3.1.1

Patches

Vulnerability mechanics

References

www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routersmitrex_refsource_MISC
www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.027
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000