PT-2023-9806 · Draytek · Draytek Vigor

Tmotfl · Published 2023-03-03 · Updated 2024-12-10 · CVE-2023-1162

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DrayTek Vigor versions 1.5.1.4 through 1.5.1.5

Description The issue is related to the function sub 1225C in the mainfunction.cgi script of the DrayTek Vigor web interface, where inadequate data cleaning on the management level can be exploited. This can allow a remote attacker to execute arbitrary commands. The manipulation of the password argument leads to command injection, and the attack can be launched remotely.

Recommendations For DrayTek Vigor versions 1.5.1.4 through 1.5.1.5, consider disabling the mainfunction.cgi script or restricting access to it until a fix is available. As a temporary workaround, avoid using the password argument in the affected web management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-11425

CVE-2023-1162

Affected Products

Draytek Vigor

References · 11

• 🔥 https://github.com/xxy1126/Vuln/blob/main/Draytek/2.md · Exploit
• https://bdu.fstec.ru/vul/2024-11425 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1162 · Security Note
• https://vuldb.com/?id.222258 · Note
• https://t.me/cvenotify/88453 · Telegram Post
• https://t.me/aptreports/14679 · Telegram Post
• https://t.me/cvenotify/45419 · Telegram Post
• https://vuldb.com/?ctiid.222258 · Note
• https://clouddefense.ai/cve/2023/CVE-2023-1162 · Note
• https://feedly.com/cve/CVE-2023-1162 · Note