Medium severity6.5NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026

CVE-2023-6265

Description

UNSUPPORTED WHEN ASSIGNED Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Draytek/Vigor2962llm-fuzzy2 versions
1.5.1.4, 1.5.1.5+ 1 more
- (no CPE)range: 1.5.1.4, 1.5.1.5
- (no CPE)range: 1.5.1.4

Patches

Vulnerability mechanics

References

github.com/xxy1126/Vuln/blob/main/Draytek/4.mdnvdExploit
www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960nvdProduct
www.draytek.com/products/vigor2960/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000