PT-2023-32582 · Draytek · Draytek Vigor2960

Published 2023-11-22 · Updated 2024-08-02 · CVE-2023-6265

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Draytek Vigor2960 versions 1.5.1.4 through 1.5.1.5

Description The issue allows an authenticated attacker with access to the web management interface to delete arbitrary files via directory traversal. This is achieved through the mainfunction.cgi dumpSyslog 'option' parameter. The Vigor2960 is no longer supported.

Recommendations For versions 1.5.1.4 and 1.5.1.5, as a temporary workaround, consider restricting access to the mainfunction.cgi endpoint until a resolution is available. Avoid using the option parameter in the dumpSyslog function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-6265

Affected Products

Draytek Vigor2960

References · 8

• 🔥 https://github.com/xxy1126/Vuln/blob/main/Draytek/4.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-6265 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6265 · Vendor Advisory
• https://t.me/cvenotify/61281 · Telegram Post
• https://t.me/cvenotify/88488 · Telegram Post
• https://draytek.com/products/vigor2960 · Note
• https://t.me/cvenotify/64264 · Telegram Post
• https://draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960 · Note