CVE Feed

    Dashboard / CVE / CVE-2022-32548

    CVE-2022-32548

    An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

    Published:Aug 29, 2022
    Last Modified:Nov 21, 2024
    EPS:Aug 29, 2022
    EPSS Score:0.62777
    CVSS Score:10

    Affected Products

    Vendor
    Draytek
    Product
    Vigor1000b
    Vendor
    Draytek
    Product
    Vigor1000b Firmware
    Vendor
    Draytek
    Product
    Vigor165
    Vendor
    Draytek
    Product
    Vigor165 Firmware
    Vendor
    Draytek
    Product
    Vigor166
    Vendor
    Draytek
    Product
    Vigor166 Firmware
    Vendor
    Draytek
    Product
    Vigor2133
    Vendor
    Draytek
    Product
    Vigor2133 Firmware
    Vendor
    Draytek
    Product
    Vigor2133ac
    Vendor
    Draytek
    Product
    Vigor2133ac Firmware
    Vendor
    Draytek
    Product
    Vigor2133fvac
    Vendor
    Draytek
    Product
    Vigor2133fvac Firmware
    Vendor
    Draytek
    Product
    Vigor2133n
    Vendor
    Draytek
    Product
    Vigor2133n Firmware
    Vendor
    Draytek
    Product
    Vigor2133vac
    Vendor
    Draytek
    Product
    Vigor2133vac Firmware
    Vendor
    Draytek
    Product
    Vigor2135
    Vendor
    Draytek
    Product
    Vigor2135 Firmware
    Vendor
    Draytek
    Product
    Vigor2135ac
    Vendor
    Draytek
    Product
    Vigor2135ac Firmware
    Vendor
    Draytek
    Product
    Vigor2135fvac
    Vendor
    Draytek
    Product
    Vigor2135fvac Firmware
    Vendor
    Draytek
    Product
    Vigor2135vac
    Vendor
    Draytek
    Product
    Vigor2135vac Firmware
    Vendor
    Draytek
    Product
    Vigor2620l
    Vendor
    Draytek
    Product
    Vigor2620l Firmware
    Vendor
    Draytek
    Product
    Vigor2620ln
    Vendor
    Draytek
    Product
    Vigor2620ln Firmware
    Vendor
    Draytek
    Product
    Vigor2762
    Vendor
    Draytek
    Product
    Vigor2762 Firmware
    Vendor
    Draytek
    Product
    Vigor2762ac
    Vendor
    Draytek
    Product
    Vigor2762ac Firmware
    Vendor
    Draytek
    Product
    Vigor2762n
    Vendor
    Draytek
    Product
    Vigor2762n Firmware
    Vendor
    Draytek
    Product
    Vigor2762vac
    Vendor
    Draytek
    Product
    Vigor2762vac Firmware
    Vendor
    Draytek
    Product
    Vigor2765
    Vendor
    Draytek
    Product
    Vigor2765 Firmware
    Vendor
    Draytek
    Product
    Vigor2765ac
    Vendor
    Draytek
    Product
    Vigor2765ac Firmware
    Vendor
    Draytek
    Product
    Vigor2765vac
    Vendor
    Draytek
    Product
    Vigor2765vac Firmware
    Vendor
    Draytek
    Product
    Vigor2766
    Vendor
    Draytek
    Product
    Vigor2766 Firmware
    Vendor
    Draytek
    Product
    Vigor2766ac
    Vendor
    Draytek
    Product
    Vigor2766ac Firmware
    Vendor
    Draytek
    Product
    Vigor2766vac
    Vendor
    Draytek
    Product
    Vigor2766vac Firmware
    Vendor
    Draytek
    Product
    Vigor2832
    Vendor
    Draytek
    Product
    Vigor2832 Firmware
    Vendor
    Draytek
    Product
    Vigor2862
    Vendor
    Draytek
    Product
    Vigor2862 Firmware
    Vendor
    Draytek
    Product
    Vigor2862ac
    Vendor
    Draytek
    Product
    Vigor2862ac Firmware
    Vendor
    Draytek
    Product
    Vigor2862b
    Vendor
    Draytek
    Product
    Vigor2862b Firmware
    Vendor
    Draytek
    Product
    Vigor2862bn
    Vendor
    Draytek
    Product
    Vigor2862bn Firmware
    Vendor
    Draytek
    Product
    Vigor2862l
    Vendor
    Draytek
    Product
    Vigor2862l Firmware
    Vendor
    Draytek
    Product
    Vigor2862lac
    Vendor
    Draytek
    Product
    Vigor2862lac Firmware
    Vendor
    Draytek
    Product
    Vigor2862ln
    Vendor
    Draytek
    Product
    Vigor2862ln Firmware
    Vendor
    Draytek
    Product
    Vigor2862n
    Vendor
    Draytek
    Product
    Vigor2862n Firmware
    Vendor
    Draytek
    Product
    Vigor2862vac
    Vendor
    Draytek
    Product
    Vigor2862vac Firmware
    Vendor
    Draytek
    Product
    Vigor2865
    Vendor
    Draytek
    Product
    Vigor2865 Firmware
    Vendor
    Draytek
    Product
    Vigor2865ac
    Vendor
    Draytek
    Product
    Vigor2865ac Firmware
    Vendor
    Draytek
    Product
    Vigor2865ax
    Vendor
    Draytek
    Product
    Vigor2865ax Firmware
    Vendor
    Draytek
    Product
    Vigor2865l
    Vendor
    Draytek
    Product
    Vigor2865l Firmware
    Vendor
    Draytek
    Product
    Vigor2865lac
    Vendor
    Draytek
    Product
    Vigor2865lac Firmware
    Vendor
    Draytek
    Product
    Vigor2865vac
    Vendor
    Draytek
    Product
    Vigor2865vac Firmware
    Vendor
    Draytek
    Product
    Vigor2866
    Vendor
    Draytek
    Product
    Vigor2866 Firmware
    Vendor
    Draytek
    Product
    Vigor2866ac
    Vendor
    Draytek
    Product
    Vigor2866ac Firmware
    Vendor
    Draytek
    Product
    Vigor2866ax
    Vendor
    Draytek
    Product
    Vigor2866ax Firmware
    Vendor
    Draytek
    Product
    Vigor2866l
    Vendor
    Draytek
    Product
    Vigor2866l Firmware
    Vendor
    Draytek
    Product
    Vigor2866lac
    Vendor
    Draytek
    Product
    Vigor2866lac Firmware
    Vendor
    Draytek
    Product
    Vigor2866vac
    Vendor
    Draytek
    Product
    Vigor2866vac Firmware
    Vendor
    Draytek
    Product
    Vigor2915
    Vendor
    Draytek
    Product
    Vigor2915 Firmware
    Vendor
    Draytek
    Product
    Vigor2915ac
    Vendor
    Draytek
    Product
    Vigor2915ac Firmware
    Vendor
    Draytek
    Product
    Vigor2926
    Vendor
    Draytek
    Product
    Vigor2926 Firmware
    Vendor
    Draytek
    Product
    Vigor2926ac
    Vendor
    Draytek
    Product
    Vigor2926ac Firmware
    Vendor
    Draytek
    Product
    Vigor2926l
    Vendor
    Draytek
    Product
    Vigor2926l Firmware
    Vendor
    Draytek
    Product
    Vigor2926lac
    Vendor
    Draytek
    Product
    Vigor2926lac Firmware
    Vendor
    Draytek
    Product
    Vigor2926ln
    Vendor
    Draytek
    Product
    Vigor2926ln Firmware
    Vendor
    Draytek
    Product
    Vigor2926n
    Vendor
    Draytek
    Product
    Vigor2926n Firmware
    Vendor
    Draytek
    Product
    Vigor2926vac
    Vendor
    Draytek
    Product
    Vigor2926vac Firmware
    Vendor
    Draytek
    Product
    Vigor2927
    Vendor
    Draytek
    Product
    Vigor2927 Firmware
    Vendor
    Draytek
    Product
    Vigor2927ac
    Vendor
    Draytek
    Product
    Vigor2927ac Firmware
    Vendor
    Draytek
    Product
    Vigor2927ax
    Vendor
    Draytek
    Product
    Vigor2927ax Firmware
    Vendor
    Draytek
    Product
    Vigor2927l
    Vendor
    Draytek
    Product
    Vigor2927l Firmware
    Vendor
    Draytek
    Product
    Vigor2927lac
    Vendor
    Draytek
    Product
    Vigor2927lac Firmware
    Vendor
    Draytek
    Product
    Vigor2927vac
    Vendor
    Draytek
    Product
    Vigor2927vac Firmware
    Vendor
    Draytek
    Product
    Vigor2952
    Vendor
    Draytek
    Product
    Vigor2952 Firmware
    Vendor
    Draytek
    Product
    Vigor2952p
    Vendor
    Draytek
    Product
    Vigor2952p Firmware
    Vendor
    Draytek
    Product
    Vigor2962
    Vendor
    Draytek
    Product
    Vigor2962 Firmware
    Vendor
    Draytek
    Product
    Vigor2962p
    Vendor
    Draytek
    Product
    Vigor2962p Firmware
    Vendor
    Draytek
    Product
    Vigor3220
    Vendor
    Draytek
    Product
    Vigor3220 Firmware
    Vendor
    Draytek
    Product
    Vigor3910
    Vendor
    Draytek
    Product
    Vigor3910 Firmware
    Vendor
    Draytek
    Product
    Vigorlte 200n
    Vendor
    Draytek
    Product
    Vigorlte 200n Firmware

    Exploits

    https://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routershttps://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.htmlhttps://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routershttps://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.htmlhttps://github.com/MosaedH/CVE-2022-32548-RCE-POC

    Related CVEs

    CVE-2025-10547 (CVSS 9.8) — An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running Dray…
    CVE-2024-51138 (CVSS 9.8) — Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2…
    CVE-2024-51139 (CVSS 9.8) — Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and…
    CVE-2024-41588 (CVSS 8) — The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buff…
    CVE-2024-41591 (CVSS 6.1) — DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.…
    CVE-2024-41592 (CVSS 8) — DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters …
    CVE-2024-41593 (CVSS 9.8) — DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft…
    CVE-2024-41594 (CVSS 7.5) — An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information becaus…
    CVE-2024-41590 (CVSS 8) — Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds ch…
    CVE-2024-41596 (CVSS 8) — Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI)…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High