PT-2023-9806 · Draytek · Draytek Vigor

Tmotfl · Publicado 2023-03-03 · Atualizado 2024-12-10 · CVE-2023-1162

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DrayTek Vigor versions 1.5.1.4 through 1.5.1.5

Description The issue is related to the function sub 1225C in the mainfunction.cgi script of the DrayTek Vigor web interface, where inadequate data cleaning on the management level can be exploited. This can allow a remote attacker to execute arbitrary commands. The manipulation of the password argument leads to command injection, and the attack can be launched remotely.

Recommendations For DrayTek Vigor versions 1.5.1.4 through 1.5.1.5, consider disabling the mainfunction.cgi script or restricting access to it until a fix is available. As a temporary workaround, avoid using the password argument in the affected web management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2024-11425

CVE-2023-1162

Produtos afetados

Draytek Vigor

Referências · 11

• 🔥 https://github.com/xxy1126/Vuln/blob/main/Draytek/2.md · Exploit
• https://bdu.fstec.ru/vul/2024-11425 · Nota de Segurança
• https://vuldb.com/?id.222258 · Nota
• https://osv.dev/vulnerability/CVE-2023-1162 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1162 · Nota de Segurança
• https://t.me/cvenotify/88453 · Publicação no Telegram
• https://t.me/aptreports/14679 · Publicação no Telegram
• https://t.me/cvenotify/45419 · Publicação no Telegram
• https://vuldb.com/?ctiid.222258 · Nota
• https://clouddefense.ai/cve/2023/CVE-2023-1162 · Nota
• https://feedly.com/cve/CVE-2023-1162 · Nota