Vulnerability Details CVE-2023-31447
user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.2%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-31447
-
cpe:2.3:h:draytek:vigor2620:-
-
cpe:2.3:h:draytek:vigor2625:-
-
cpe:2.3:o:draytek:vigor2620_firmware:*
-
cpe:2.3:o:draytek:vigor2625_firmware:*