An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Vigor1000B
Vendor
DrayTek Corporation
Product
Vigor1000B
Platforms
Unknown
Default status
Unknown
Vigor1000B · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.4.5.1
Unavailable
None listed
Vigor2962
Vendor
DrayTek Corporation
Product
Vigor2962
Platforms
Unknown
Default status
Unknown
Vigor2962 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.4.5.1
Unavailable
None listed
Vigor3910
Vendor
DrayTek Corporation
Product
Vigor3910
Platforms
Unknown
Default status
Unknown
Vigor3910 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.4.3.6
Unavailable
None listed
Vigor3912
Vendor
DrayTek Corporation
Product
Vigor3912
Platforms
Unknown
Default status
Unknown
Vigor3912 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.4.5.1
Unavailable
None listed
Vigor2135
Vendor
DrayTek Corporation
Product
Vigor2135
Platforms
Unknown
Default status
Unknown
Vigor2135 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.5.1
Unavailable
None listed
Vigor2763
Vendor
DrayTek Corporation
Product
Vigor2763
Platforms
Unknown
Default status
Unknown
Vigor2763 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.5.1
Unavailable
None listed
Vigor2765
Vendor
DrayTek Corporation
Product
Vigor2765
Platforms
Unknown
Default status
Unknown
Vigor2765 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.5.1
Unavailable
None listed
Vigor2766
Vendor
DrayTek Corporation
Product
Vigor2766
Platforms
Unknown
Default status
Unknown
Vigor2766 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.5.1
Unavailable
None listed
Vigor2865
Vendor
DrayTek Corporation
Product
Vigor2865
Platforms
Unknown
Default status
Unknown
Vigor2865 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.5.1
Unavailable
None listed
Vigor2865 LTE Series
Vendor
DrayTek Corporation
Product
Vigor2865 LTE Series
Platforms
Unknown
Default status
Unknown
Vigor2865 LTE Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
4.5.1
Unavailable
None listed
Vigor2865L-5G Series
Vendor
DrayTek Corporation
Product
Vigor2865L-5G Series
Platforms
Unknown
Default status
Unknown
Vigor2865L-5G Series · Scoped product and version facts