CVE-2023-23313: XSS

Published Mar 3, 2023
·
Updated

Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and userlogin.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.

Affected Software

352 affected components
DrayTek Vigor2860 Firmware<3.9.4
DrayTek Vigor2860
DrayTek Vigor2860n Firmware<3.9.4
DrayTek Vigor2860n
DrayTek Vigor2860n-plus Firmware<3.9.4
DrayTek Vigor2860n-plus
DrayTek Vigor2860vn-plus Firmware<3.9.4
DrayTek Vigor2860vn-plus
DrayTek Vigor2860ac Firmware<3.9.4
DrayTek Vigor2860ac
DrayTek Vigor2860vac Firmware<3.9.4
DrayTek Vigor2860vac
DrayTek Vigor2860l Firmware<3.9.4
DrayTek Vigor2860l
DrayTek Vigor2860ln Firmware<3.9.4
DrayTek Vigor2860ln
DrayTek Vigor2832 Firmware<3.9.6.3
DrayTek Vigor2832
DrayTek Vigor2832n Firmware<3.9.6.3
DrayTek Vigor2832n
DrayTek Vigor2766 Firmware<4.4.2.1
DrayTek Vigor2766
DrayTek Vigor2766ax Firmware<4.4.2.1
DrayTek Vigor2766ax
DrayTek Vigor2766ac Firmware<4.4.2.1
DrayTek Vigor2766ac
DrayTek Vigor2766vac Firmware<4.4.2.1
DrayTek Vigor2766vac
DrayTek Vigor2765 Firmware<4.4.2.1
DrayTek Vigor2765
DrayTek Vigor2765ax Firmware<4.4.2.1
DrayTek Vigor2765ax
DrayTek Vigor2765ac Firmware<4.4.2.1
DrayTek Vigor2765ac
DrayTek Vigor2765va Firmware<4.4.2.1
DrayTek Vigor2765va
DrayTek Vigor2763 Firmware<4.4.2.2
DrayTek Vigor2763
DrayTek Vigor2763ac Firmware<4.4.2.2
DrayTek Vigor2763ac
DrayTek Vigor2762 Firmware<3.9.6.5
DrayTek Vigor2762
DrayTek Vigor2762n Firmware<3.9.6.5
DrayTek Vigor2762n
DrayTek Vigor2762ac Firmware<3.9.6.5
DrayTek Vigor2762ac
DrayTek Vigor2762vac Firmware<3.9.6.5
DrayTek Vigor2762vac
DrayTek Vigor2135 Firmware<4.4.2.1
DrayTek Vigor2135
DrayTek Vigor2135ax Firmware<4.4.2.1
DrayTek Vigor2135ax
DrayTek Vigor2135ac Firmware<4.4.2.1
DrayTek Vigor2135ac
DrayTek Vigor2135vac Firmware<4.4.2.1
DrayTek Vigor2135vac
DrayTek Vigor2135fvac Firmware<4.4.2.1
DrayTek Vigor2135fvac
DrayTek Vigor2133 Firmware<3.9.6.5
DrayTek Vigor2133
DrayTek Vigor2133n Firmware<3.9.6.5
DrayTek Vigor2133n
DrayTek Vigor2133ac Firmware<3.9.6.5
DrayTek Vigor2133ac
DrayTek Vigor2133vac Firmware<3.9.6.5
DrayTek Vigor2133vac
DrayTek Vigor2133fvac Firmware<3.9.6.5
DrayTek Vigor2133fvac
DrayTek Vigor166 Firmware<4.2.4.1
DrayTek Vigor166
DrayTek Vigor165 Firmware<4.2.4.1
DrayTek Vigor165
DrayTek Vigor130 Firmware<3.8.5.1
DrayTek Vigor130
DrayTek Vigornic 132 Firmware<3.8.5.1
DrayTek Vigornic 132
DrayTek Virgor3910 Firmware<4.3.2.2
DrayTek Virgor3910
DrayTek Virgor3220 Firmware<3.9.7.4
DrayTek Virgor3220
DrayTek Virgor2962 Firmware<4.3.2.2
DrayTek Virgor2962
DrayTek Virgor2962p Firmware<4.3.2.2
DrayTek Virgor2962p
DrayTek Virgor1000b Firmware<4.3.2.2
DrayTek Virgor1000b
DrayTek Virgor2952 Firmware<3.9.7.4
DrayTek Virgor2952
DrayTek Virgor2952p Firmware<3.9.7.4
DrayTek Virgor2952p
DrayTek Virgor2927 Firmware<4.4.2.3
DrayTek Virgor2927
DrayTek Virgor2927ax Firmware<4.4.2.3
DrayTek Virgor2927ax
DrayTek Virgor2927ac Firmware<4.4.2.3
DrayTek Virgor2927ac
DrayTek Virgor2927vac Firmware<4.4.2.3
DrayTek Virgor2927vac
DrayTek Virgor2927f Firmware<4.4.2.3
DrayTek Virgor2927f
DrayTek Virgor2927l Firmware<4.4.2.3
DrayTek Virgor2927l
DrayTek Virgor2927lac Firmware<4.4.2.3
DrayTek Virgor2927lac
DrayTek Virgor2926 Firmware<3.9.9.1
DrayTek Virgor2926
DrayTek Virgor2926n Firmware<3.9.9.1
DrayTek Virgor2926n
DrayTek Virgor2926ac Firmware<3.9.9.1
DrayTek Virgor2926ac
DrayTek Virgor2926vac Firmware<3.9.9.1
DrayTek Virgor2926vac
DrayTek Virgor2926l Firmware<3.9.9.1
DrayTek Virgor2926l
DrayTek Virgor2926ln Firmware<3.9.9.1
DrayTek Virgor2926ln
DrayTek Virgor2926lac Firmware<3.9.9.1
DrayTek Virgor2926lac
DrayTek Virgor2925 Firmware<3.9.4
DrayTek Virgor2925
DrayTek Virgor2925n Firmware<3.9.4
DrayTek Virgor2925n
DrayTek Virgor2925n-plus Firmware<3.9.4
DrayTek Virgor2925n-plus
DrayTek Virgor2925vn-plus Firmware<3.9.4
DrayTek Virgor2925vn-plus
DrayTek Virgor2925ac Firmware<3.9.4
DrayTek Virgor2925ac
DrayTek Virgor2925vac Firmware<3.9.4
DrayTek Virgor2925vac
DrayTek Virgor2925fn Firmware<3.9.4
DrayTek Virgor2925fn
DrayTek Virgor2925l Firmware<3.9.4
DrayTek Virgor2925l
DrayTek Virgor2925ln Firmware<3.9.4
DrayTek Virgor2925ln
DrayTek Virgor2915 Firmware<4.4.2.1
DrayTek Virgor2915
DrayTek Virgor2915ac Firmware<4.4.2.1
DrayTek Virgor2915ac
DrayTek Virgor2866 Firmware<4.4.1.1
DrayTek Virgor2866
DrayTek Virgor2866ax Firmware<4.4.1.1
DrayTek Virgor2866ax
DrayTek Virgor2866ac Firmware<4.4.1.1
DrayTek Virgor2866ac
DrayTek Virgor2866vac Firmware<4.4.1.1
DrayTek Virgor2866vac
DrayTek Virgor2866l Firmware<4.4.1.1
DrayTek Virgor2866l
DrayTek Virgor2866lac Firmware<4.4.1.1
DrayTek Virgor2866lac
DrayTek Virgor2865 Firmware<4.4.1.1
DrayTek Virgor2865
DrayTek Virgor2865ax Firmware<4.4.1.1
DrayTek Virgor2865ax
DrayTek Virgor2865ac Firmware<4.4.1.1
DrayTek Virgor2865ac
DrayTek Virgor2865vac Firmware<4.4.1.1
DrayTek Virgor2865vac
DrayTek Virgor2865l Firmware<4.4.1.1
DrayTek Virgor2865l
DrayTek Virgor2865lac Firmware<4.4.1.1
DrayTek Virgor2865lac
DrayTek Virgor2862 Firmware<3.9.9.1
DrayTek Virgor2862
DrayTek Virgor2862n Firmware<3.9.9.1
DrayTek Virgor2862n
DrayTek Virgor2862ac Firmware<3.9.9.1
DrayTek Virgor2862ac
DrayTek Virgor2862vac Firmware<3.9.9.1
DrayTek Virgor2862vac
DrayTek Virgor2862b Firmware<3.9.9.1
DrayTek Virgor2862b
DrayTek Virgor2862bn Firmware<3.9.9.1
DrayTek Virgor2862bn
DrayTek Virgor2862l Firmware<3.9.9.1
DrayTek Virgor2862l
DrayTek Virgor2862ln Firmware<3.9.9.1
DrayTek Virgor2862ln
DrayTek Virgor2862lac Firmware<3.9.9.1
DrayTek Virgor2862lac
All of the following
DrayTek Vigor2860 Firmware<3.9.4
DrayTek Vigor2860
All of the following
DrayTek Vigor2860n Firmware<3.9.4
DrayTek Vigor2860n
All of the following
DrayTek Vigor2860n-plus Firmware<3.9.4
DrayTek Vigor2860n-plus
All of the following
DrayTek Vigor2860vn-plus Firmware<3.9.4
DrayTek Vigor2860vn-plus
All of the following
DrayTek Vigor2860ac Firmware<3.9.4
DrayTek Vigor2860ac
All of the following
DrayTek Vigor2860vac Firmware<3.9.4
DrayTek Vigor2860vac
All of the following
DrayTek Vigor2860l Firmware<3.9.4
DrayTek Vigor2860l
All of the following
DrayTek Vigor2860ln Firmware<3.9.4
DrayTek Vigor2860ln
All of the following
DrayTek Vigor2832 Firmware<3.9.6.3
DrayTek Vigor2832
All of the following
DrayTek Vigor2832n Firmware<3.9.6.3
DrayTek Vigor2832n
All of the following
DrayTek Vigor2766 Firmware<4.4.2.1
DrayTek Vigor2766
All of the following
DrayTek Vigor2766ax Firmware<4.4.2.1
DrayTek Vigor2766ax
All of the following
DrayTek Vigor2766ac Firmware<4.4.2.1
DrayTek Vigor2766ac
All of the following
DrayTek Vigor2766vac Firmware<4.4.2.1
DrayTek Vigor2766vac
All of the following
DrayTek Vigor2765 Firmware<4.4.2.1
DrayTek Vigor2765
All of the following
DrayTek Vigor2765ax Firmware<4.4.2.1
DrayTek Vigor2765ax
All of the following
DrayTek Vigor2765ac Firmware<4.4.2.1
DrayTek Vigor2765ac
All of the following
DrayTek Vigor2765va Firmware<4.4.2.1
DrayTek Vigor2765va
All of the following
DrayTek Vigor2763 Firmware<4.4.2.2
DrayTek Vigor2763
All of the following
DrayTek Vigor2763ac Firmware<4.4.2.2
DrayTek Vigor2763ac
All of the following
DrayTek Vigor2762 Firmware<3.9.6.5
DrayTek Vigor2762
All of the following
DrayTek Vigor2762n Firmware<3.9.6.5
DrayTek Vigor2762n
All of the following
DrayTek Vigor2762ac Firmware<3.9.6.5
DrayTek Vigor2762ac
All of the following
DrayTek Vigor2762vac Firmware<3.9.6.5
DrayTek Vigor2762vac
All of the following
DrayTek Vigor2135 Firmware<4.4.2.1
DrayTek Vigor2135
All of the following
DrayTek Vigor2135ax Firmware<4.4.2.1
DrayTek Vigor2135ax
All of the following
DrayTek Vigor2135ac Firmware<4.4.2.1
DrayTek Vigor2135ac
All of the following
DrayTek Vigor2135vac Firmware<4.4.2.1
DrayTek Vigor2135vac
All of the following
DrayTek Vigor2135fvac Firmware<4.4.2.1
DrayTek Vigor2135fvac
All of the following
DrayTek Vigor2133 Firmware<3.9.6.5
DrayTek Vigor2133
All of the following
DrayTek Vigor2133n Firmware<3.9.6.5
DrayTek Vigor2133n
All of the following
DrayTek Vigor2133ac Firmware<3.9.6.5
DrayTek Vigor2133ac
All of the following
DrayTek Vigor2133vac Firmware<3.9.6.5
DrayTek Vigor2133vac
All of the following
DrayTek Vigor2133fvac Firmware<3.9.6.5
DrayTek Vigor2133fvac
All of the following
DrayTek Vigor166 Firmware<4.2.4.1
DrayTek Vigor166
All of the following
DrayTek Vigor165 Firmware<4.2.4.1
DrayTek Vigor165
All of the following
DrayTek Vigor130 Firmware<3.8.5.1
DrayTek Vigor130
All of the following
DrayTek Vigornic 132 Firmware<3.8.5.1
DrayTek Vigornic 132
All of the following
DrayTek Vigor3910 Firmware<4.3.2.2
DrayTek Vigor3910
All of the following
DrayTek Vigor3220 Firmware<3.9.7.4
DrayTek Vigor3220
All of the following
DrayTek Vigor2962 Firmware<4.3.2.2
DrayTek Vigor2962
All of the following
DrayTek Vigor2962p Firmware<4.3.2.2
DrayTek Vigor2962p
DrayTek Vigor1000b Firmware<4.3.2.2
All of the following
DrayTek Vigor2952 Firmware<3.9.7.4
DrayTek Vigor2952
All of the following
DrayTek Vigor2952p Firmware<3.9.7.4
DrayTek Vigor2952p
All of the following
DrayTek Vigor2927 Firmware<4.4.2.3
DrayTek Vigor2927
All of the following
DrayTek Vigor2927ax Firmware<4.4.2.3
DrayTek Vigor2927ax
All of the following
DrayTek Vigor2927ac Firmware<4.4.2.3
DrayTek Vigor2927ac
All of the following
DrayTek Vigor2927vac Firmware<4.4.2.3
DrayTek Vigor2927vac
All of the following
DrayTek Vigor2927f Firmware<4.4.2.3
DrayTek Vigor2927f
All of the following
DrayTek Vigor2927l Firmware<4.4.2.3
DrayTek Vigor2927l
All of the following
DrayTek Vigor2927lac Firmware<4.4.2.3
DrayTek Vigor2927lac
All of the following
DrayTek Vigor2926 Firmware<3.9.9.1
DrayTek Vigor2926
All of the following
DrayTek Vigor2926n Firmware<3.9.9.1
DrayTek Vigor2926n
All of the following
DrayTek Vigor2926ac Firmware<3.9.9.1
DrayTek Vigor2926ac
All of the following
DrayTek Vigor2926vac Firmware<3.9.9.1
DrayTek Vigor2926vac
All of the following
DrayTek Vigor2926l Firmware<3.9.9.1
DrayTek Vigor2926l
All of the following
DrayTek Vigor2926ln Firmware<3.9.9.1
DrayTek Vigor2926ln
All of the following
DrayTek Vigor2926lac Firmware<3.9.9.1
DrayTek Vigor2926lac
All of the following
DrayTek Vigor2925 Firmware<3.9.4
DrayTek Vigor2925
DrayTek Vigor2925n-plus
DrayTek Vigor2925vn-plus
DrayTek Vigor2925ac
DrayTek Vigor2925vac
DrayTek Vigor2925fn
All of the following
DrayTek Vigor2915 Firmware<4.4.2.1
DrayTek Vigor2915
All of the following
DrayTek Vigor2915ac Firmware<4.4.2.1
DrayTek Vigor2915ac
All of the following
DrayTek Vigor2866 Firmware<4.4.1.1
DrayTek Vigor2866
All of the following
DrayTek Vigor2866ax Firmware<4.4.1.1
DrayTek Vigor2866ax
All of the following
DrayTek Vigor2866ac Firmware<4.4.1.1
DrayTek Vigor2866ac
All of the following
DrayTek Vigor2866vac Firmware<4.4.1.1
DrayTek Vigor2866vac
All of the following
DrayTek Vigor2866l Firmware<4.4.1.1
DrayTek Vigor2866l
All of the following
DrayTek Vigor2866lac Firmware<4.4.1.1
DrayTek Vigor2866lac
All of the following
DrayTek Vigor2865 Firmware<4.4.1.1
DrayTek Vigor2865
All of the following
DrayTek Vigor2865ax Firmware<4.4.1.1
DrayTek Vigor2865ax
All of the following
DrayTek Vigor2865ac Firmware<4.4.1.1
DrayTek Vigor2865ac
All of the following
DrayTek Vigor2865vac Firmware<4.4.1.1
DrayTek Vigor2865vac
All of the following
DrayTek Vigor2865l Firmware<4.4.1.1
DrayTek Vigor2865l
All of the following
DrayTek Vigor2865lac Firmware<4.4.1.1
DrayTek Vigor2865lac
All of the following
DrayTek Vigor2862 Firmware<3.9.9.1
DrayTek Vigor2862
All of the following
DrayTek Vigor2862n Firmware<3.9.9.1
DrayTek Vigor2862n
All of the following
DrayTek Vigor2862ac Firmware<3.9.9.1
DrayTek Vigor2862ac
All of the following
DrayTek Vigor2862vac Firmware<3.9.9.1
DrayTek Vigor2862vac
All of the following
DrayTek Vigor2862b Firmware<3.9.9.1
DrayTek Vigor2862b
All of the following
DrayTek Vigor2862bn Firmware<3.9.9.1
DrayTek Vigor2862bn
All of the following
DrayTek Vigor2862l Firmware<3.9.9.1
DrayTek Vigor2862l
All of the following
DrayTek Vigor2862ln Firmware<3.9.9.1
DrayTek Vigor2862ln
All of the following
DrayTek Vigor2862lac Firmware<3.9.9.1
DrayTek Vigor2862lac

Event History

Mar 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-23313?

CVE-2023-23313 is classified as a Cross Site Scripting (XSS) vulnerability, which can lead to unauthorized access to sensitive information.

2

How do I fix CVE-2023-23313?

To fix CVE-2023-23313, update the firmware of the affected Draytek products to the latest version that addresses this vulnerability.

3

Which products are affected by CVE-2023-23313?

CVE-2023-23313 affects several Draytek Vigor models, including the Vigor3910, Vigor1000B, and Vigor2962, among others.

4

Is there a workaround for CVE-2023-23313?

Currently, the only effective workaround for CVE-2023-23313 is to upgrade to patched firmware versions.

5

What are the potential impacts of exploiting CVE-2023-23313?

Exploiting CVE-2023-23313 can allow attackers to execute scripts in the context of the user's browser, potentially compromising authentication tokens and session identifiers.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203