← Database

CVE-2022-32548

CRITICAL CVSS: 10.0 Published: 2022-08-29 Modified: 2026-06-17

Description

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

Affected Platforms

Draytek Vigor3910 FirmwareDraytek Vigor2952Draytek Vigor2962P FirmwareDraytek Vigor2927AxDraytek Vigor2926LnDraytek Vigor2866L FirmwareDraytek Vigor2862NDraytek Vigor2766Vac FirmwareDraytek Vigor2866AxDraytek Vigor2866Lac Firmware

Weakness Type

CWE-120

References