CVE-2022-32548: Buffer Overflow
Published Aug 29, 2022
·Updated
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
Affected Software
136 affected components
DrayTek Vigor3910 Firmware<4.3.1.1
DrayTek Vigor3910
DrayTek Vigor1000b Firmware<4.3.1.1
Draytek Vigor1000b Firmware
DrayTek Vigor2962 Firmware<4.3.1.1
DrayTek Vigor2962
DrayTek Vigor2962p Firmware<4.3.1.1
DrayTek Vigor2962p
DrayTek Vigor2927 Firmware<4.4.0
DrayTek Vigor2927
DrayTek Vigor2927ax Firmware<4.4.0
DrayTek Vigor2927ax
DrayTek Vigor2927ac Firmware<4.4.0
DrayTek Vigor2927ac
DrayTek Vigor2927vac Firmware<4.4.0
DrayTek Vigor2927vac
DrayTek Vigor2927l Firmware<4.4.0
DrayTek Vigor2927l
DrayTek Vigor2927lac Firmware<4.4.0
DrayTek Vigor2927lac
DrayTek Vigor2915 Firmware<4.3.3.2
DrayTek Vigor2915
DrayTek Vigor2915ac Firmware<4.3.3.2
DrayTek Vigor2915ac
DrayTek Vigor2952 Firmware<3.9.7.2
DrayTek Vigor2952
DrayTek Vigor2952p Firmware<3.9.7.2
DrayTek Vigor2952p
DrayTek Vigor3220 Firmware<3.9.7.2
DrayTek Vigor3220
DrayTek Vigor2926 Firmware<3.9.8.1
DrayTek Vigor2926
DrayTek Vigor2926n Firmware<3.9.8.1
DrayTek Vigor2926n
DrayTek Vigor2926ac Firmware<3.9.8.1
DrayTek Vigor2926ac
DrayTek Vigor2926vac Firmware<3.9.8.1
DrayTek Vigor2926vac
DrayTek Vigor2926l Firmware<3.9.8.1
DrayTek Vigor2926l
DrayTek Vigor2926ln Firmware<3.9.8.1
DrayTek Vigor2926ln
DrayTek Vigor2926lac Firmware<3.9.8.1
DrayTek Vigor2926lac
DrayTek Vigor2862 Firmware<3.9.8.1
DrayTek Vigor2862
DrayTek Vigor2862n Firmware<3.9.8.1
DrayTek Vigor2862n
DrayTek Vigor2862ac Firmware<3.9.8.1
DrayTek Vigor2862ac
DrayTek Vigor2862vac Firmware<3.9.8.1
DrayTek Vigor2862vac
DrayTek Vigor2862b Firmware<3.9.8.1
DrayTek Vigor2862b
DrayTek Vigor2862bn Firmware<3.9.8.1
DrayTek Vigor2862bn
DrayTek Vigor2862l Firmware<3.9.8.1
DrayTek Vigor2862l
DrayTek Vigor2862ln Firmware<3.9.8.1
DrayTek Vigor2862ln
DrayTek Vigor2862lac Firmware<3.9.8.1
DrayTek Vigor2862lac
DrayTek Vigor2620l Firmware<3.9.8.1
DrayTek Vigor2620l
DrayTek Vigor2620ln Firmware<3.9.8.1
DrayTek Vigor2620ln
DrayTek Vigorlte 200n Firmware<3.9.8.1
DrayTek Vigorlte 200n
DrayTek Vigor2133 Firmware<3.9.6.4
DrayTek Vigor2133
DrayTek Vigor2133n Firmware<3.9.6.4
DrayTek Vigor2133n
DrayTek Vigor2133ac Firmware<3.9.6.4
DrayTek Vigor2133ac
DrayTek Vigor2133vac Firmware<3.9.6.4
DrayTek Vigor2133vac
DrayTek Vigor2133fvac Firmware<3.9.6.4
DrayTek Vigor2133fvac
DrayTek Vigor2762 Firmware<3.9.6.4
DrayTek Vigor2762
DrayTek Vigor2762n Firmware<3.9.6.4
DrayTek Vigor2762n
DrayTek Vigor2762ac Firmware<3.9.6.4
DrayTek Vigor2762ac
DrayTek Vigor2762vac Firmware<3.9.6.4
DrayTek Vigor2762vac
DrayTek Vigor165 Firmware<4.2.4
DrayTek Vigor165
DrayTek Vigor166 Firmware<4.2.4
DrayTek Vigor166
DrayTek Vigor2135 Firmware<4.4.2
DrayTek Vigor2135
DrayTek Vigor2135ac Firmware<4.4.2
DrayTek Vigor2135ac
DrayTek Vigor2135vac Firmware<4.4.2
DrayTek Vigor2135vac
DrayTek Vigor2135fvac Firmware<4.4.2
DrayTek Vigor2135fvac
DrayTek Vigor2765 Firmware<4.4.2
DrayTek Vigor2765
DrayTek Vigor2765ac Firmware<4.4.2
DrayTek Vigor2765ac
DrayTek Vigor2765vac Firmware<4.4.2
DrayTek Vigor2765vac
DrayTek Vigor2766 Firmware<4.4.2
DrayTek Vigor2766
DrayTek Vigor2766ac Firmware<4.4.2
DrayTek Vigor2766ac
DrayTek Vigor2766vac Firmware<4.4.2
DrayTek Vigor2766vac
DrayTek Vigor2832 Firmware<3.9.6
DrayTek Vigor2832
DrayTek Vigor2865 Firmware<4.4.0
DrayTek Vigor2865
DrayTek Vigor2865ax Firmware<4.4.0
DrayTek Vigor2865ax
DrayTek Vigor2865ac Firmware<4.4.0
DrayTek Vigor2865ac
DrayTek Vigor2865vac Firmware<4.4.0
DrayTek Vigor2865vac
DrayTek Vigor2865l Firmware<4.4.0
DrayTek Vigor2865l
DrayTek Vigor2865lac Firmware<4.4.0
DrayTek Vigor2865lac
DrayTek Vigor2866 Firmware<4.4.0
DrayTek Vigor2866
DrayTek Vigor2866ax Firmware<4.4.0
DrayTek Vigor2866ax
DrayTek Vigor2866ac Firmware<4.4.0
DrayTek Vigor2866ac
DrayTek Vigor2866vac Firmware<4.4.0
DrayTek Vigor2866vac
DrayTek Vigor2866l Firmware<4.4.0
DrayTek Vigor2866l
DrayTek Vigor2866lac Firmware<4.4.0
DrayTek Vigor2866lac
Event History
Aug 29, 2022
CVE Published
via MITRE·05:38 AM
Data Sourced
via MITRE·05:38 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2022-32548?
CVE-2022-32548 has been identified as a critical severity vulnerability due to its potential for remote code execution via a buffer overflow.
2
How do I fix CVE-2022-32548?
To fix CVE-2022-32548, update the DrayTek Vigor router firmware to version 4.3.1.1 or later.
3
Which DrayTek routers are affected by CVE-2022-32548?
The affected models include DrayTek Vigor3910, Vigor1000b, Vigor2962, Vigor2915, Vigor2952, and several others running firmware prior to specified versions.
4
What type of vulnerability is CVE-2022-32548?
CVE-2022-32548 is a buffer overflow vulnerability that can occur through the username or password fields in a specific CGI script.
5
When was the vulnerability CVE-2022-32548 discovered?
CVE-2022-32548 was discovered prior to July 2022 and affects earlier firmware versions of the relevant DrayTek products.