CVE-2023-1162: DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
First published: Fri Mar 03 2023(Updated: )
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the argument password leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222258 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Draytek Vigor 2960 Firmware | =1.5.1.4 | |
| DrayTek Vigor 2960 | ||
| All of | ||
| =1.5.1.4 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-1162?
The severity of CVE-2023-1162 is high.
What is the affected software for CVE-2023-1162?
The affected software for CVE-2023-1162 is DrayTek Vigor 2960 Firmware 1.5.1.4.
How can the vulnerability in CVE-2023-1162 be exploited?
The vulnerability in CVE-2023-1162 can be exploited remotely.
What is the fix for CVE-2023-1162?
A fix for CVE-2023-1162 may be provided by the vendor DrayTek.
What is the CWE ID for CVE-2023-1162?
The CWE ID for CVE-2023-1162 is 77.
- collector/nvd-index
- agent/author
- agent/type
- agent/first-publish-date
- agent/references
- agent/title
- agent/severity
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/draytek
- canonical/draytek vigor 2960 firmware
- version/draytek vigor 2960 firmware/1.5.1.4
- canonical/draytek vigor 2960