Description
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
DrayTek Corporation Vigor1000B
0 to < 4.4.5.1affected
DrayTek Corporation Vigor2962
0 to < 4.4.5.1affected
DrayTek Corporation Vigor3910
0 to < 4.4.3.6affected
DrayTek Corporation Vigor3912
0 to < 4.4.5.1affected
DrayTek Corporation Vigor2135
0 to < 4.5.1affected
DrayTek Corporation Vigor2763
0 to < 4.5.1affected
DrayTek Corporation Vigor2765
0 to < 4.5.1affected
DrayTek Corporation Vigor2766
0 to < 4.5.1affected
DrayTek Corporation Vigor2865
0 to < 4.5.1affected
DrayTek Corporation Vigor2865 LTE Series
0 to < 4.5.1affected
DrayTek Corporation Vigor2865L-5G Series
0 to < 4.5.1affected
DrayTek Corporation Vigor2866
1.0 to < 4.5.1affected
DrayTek Corporation Vigor2866 LTE
0 to < 4.5.1affected
DrayTek Corporation Vigor2927
0 to < 4.5.1affected
DrayTek Corporation Vigor 2927 LTE
0 to < 4.5.1affected
DrayTek Corporation Vigor2927L-5G
0 to < 4.5.1affected
DrayTek Corporation Vigor2915
0 to < 4.4.6.1affected
DrayTek Corporation Vigor2862
0 to < 3.9.9.12affected
DrayTek Corporation Vigor2862 LTE
0 to < 3.9.9.12affected
DrayTek Corporation Vigor2926
0 to < 3.9.9.12affected