CVE Feed

    Dashboard / CVE / CVE-2023-23313

    CVE-2023-23313

    Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.

    Published:Mar 3, 2023
    Last Modified:Oct 7, 2025
    EPS:Mar 3, 2023
    EPSS Score:0.00741
    CVSS Score:6.1

    Affected Products

    Vendor
    Draytek
    Product
    Vigor1000b
    Vendor
    Draytek
    Product
    Vigor1000b Firmware
    Vendor
    Draytek
    Product
    Vigor130
    Vendor
    Draytek
    Product
    Vigor130 Firmware
    Vendor
    Draytek
    Product
    Vigor165
    Vendor
    Draytek
    Product
    Vigor165 Firmware
    Vendor
    Draytek
    Product
    Vigor166
    Vendor
    Draytek
    Product
    Vigor166 Firmware
    Vendor
    Draytek
    Product
    Vigor2133
    Vendor
    Draytek
    Product
    Vigor2133 Firmware
    Vendor
    Draytek
    Product
    Vigor2133ac
    Vendor
    Draytek
    Product
    Vigor2133ac Firmware
    Vendor
    Draytek
    Product
    Vigor2133fvac
    Vendor
    Draytek
    Product
    Vigor2133fvac Firmware
    Vendor
    Draytek
    Product
    Vigor2133n
    Vendor
    Draytek
    Product
    Vigor2133n Firmware
    Vendor
    Draytek
    Product
    Vigor2133vac
    Vendor
    Draytek
    Product
    Vigor2133vac Firmware
    Vendor
    Draytek
    Product
    Vigor2135
    Vendor
    Draytek
    Product
    Vigor2135 Firmware
    Vendor
    Draytek
    Product
    Vigor2135ac
    Vendor
    Draytek
    Product
    Vigor2135ac Firmware
    Vendor
    Draytek
    Product
    Vigor2135ax
    Vendor
    Draytek
    Product
    Vigor2135ax Firmware
    Vendor
    Draytek
    Product
    Vigor2135fvac
    Vendor
    Draytek
    Product
    Vigor2135fvac Firmware
    Vendor
    Draytek
    Product
    Vigor2135vac
    Vendor
    Draytek
    Product
    Vigor2135vac Firmware
    Vendor
    Draytek
    Product
    Vigor2762
    Vendor
    Draytek
    Product
    Vigor2762 Firmware
    Vendor
    Draytek
    Product
    Vigor2762ac
    Vendor
    Draytek
    Product
    Vigor2762ac Firmware
    Vendor
    Draytek
    Product
    Vigor2762n
    Vendor
    Draytek
    Product
    Vigor2762n Firmware
    Vendor
    Draytek
    Product
    Vigor2762vac
    Vendor
    Draytek
    Product
    Vigor2762vac Firmware
    Vendor
    Draytek
    Product
    Vigor2763
    Vendor
    Draytek
    Product
    Vigor2763 Firmware
    Vendor
    Draytek
    Product
    Vigor2763ac
    Vendor
    Draytek
    Product
    Vigor2763ac Firmware
    Vendor
    Draytek
    Product
    Vigor2765
    Vendor
    Draytek
    Product
    Vigor2765 Firmware
    Vendor
    Draytek
    Product
    Vigor2765ac
    Vendor
    Draytek
    Product
    Vigor2765ac Firmware
    Vendor
    Draytek
    Product
    Vigor2765ax
    Vendor
    Draytek
    Product
    Vigor2765ax Firmware
    Vendor
    Draytek
    Product
    Vigor2765va
    Vendor
    Draytek
    Product
    Vigor2765va Firmware
    Vendor
    Draytek
    Product
    Vigor2766
    Vendor
    Draytek
    Product
    Vigor2766 Firmware
    Vendor
    Draytek
    Product
    Vigor2766ac
    Vendor
    Draytek
    Product
    Vigor2766ac Firmware
    Vendor
    Draytek
    Product
    Vigor2766ax
    Vendor
    Draytek
    Product
    Vigor2766ax Firmware
    Vendor
    Draytek
    Product
    Vigor2766vac
    Vendor
    Draytek
    Product
    Vigor2766vac Firmware
    Vendor
    Draytek
    Product
    Vigor2832
    Vendor
    Draytek
    Product
    Vigor2832 Firmware
    Vendor
    Draytek
    Product
    Vigor2832n
    Vendor
    Draytek
    Product
    Vigor2832n Firmware
    Vendor
    Draytek
    Product
    Vigor2860
    Vendor
    Draytek
    Product
    Vigor2860 Firmware
    Vendor
    Draytek
    Product
    Vigor2860ac
    Vendor
    Draytek
    Product
    Vigor2860ac Firmware
    Vendor
    Draytek
    Product
    Vigor2860l
    Vendor
    Draytek
    Product
    Vigor2860l Firmware
    Vendor
    Draytek
    Product
    Vigor2860ln
    Vendor
    Draytek
    Product
    Vigor2860ln Firmware
    Vendor
    Draytek
    Product
    Vigor2860n
    Vendor
    Draytek
    Product
    Vigor2860n-plus
    Vendor
    Draytek
    Product
    Vigor2860n-plus Firmware
    Vendor
    Draytek
    Product
    Vigor2860n Firmware
    Vendor
    Draytek
    Product
    Vigor2860vac
    Vendor
    Draytek
    Product
    Vigor2860vac Firmware
    Vendor
    Draytek
    Product
    Vigor2860vn-plus
    Vendor
    Draytek
    Product
    Vigor2860vn-plus Firmware
    Vendor
    Draytek
    Product
    Vigor2862
    Vendor
    Draytek
    Product
    Vigor2862 Firmware
    Vendor
    Draytek
    Product
    Vigor2862ac
    Vendor
    Draytek
    Product
    Vigor2862ac Firmware
    Vendor
    Draytek
    Product
    Vigor2862b
    Vendor
    Draytek
    Product
    Vigor2862b Firmware
    Vendor
    Draytek
    Product
    Vigor2862bn
    Vendor
    Draytek
    Product
    Vigor2862bn Firmware
    Vendor
    Draytek
    Product
    Vigor2862l
    Vendor
    Draytek
    Product
    Vigor2862l Firmware
    Vendor
    Draytek
    Product
    Vigor2862lac
    Vendor
    Draytek
    Product
    Vigor2862lac Firmware
    Vendor
    Draytek
    Product
    Vigor2862ln
    Vendor
    Draytek
    Product
    Vigor2862ln Firmware
    Vendor
    Draytek
    Product
    Vigor2862n
    Vendor
    Draytek
    Product
    Vigor2862n Firmware
    Vendor
    Draytek
    Product
    Vigor2862vac
    Vendor
    Draytek
    Product
    Vigor2862vac Firmware
    Vendor
    Draytek
    Product
    Vigor2865
    Vendor
    Draytek
    Product
    Vigor2865 Firmware
    Vendor
    Draytek
    Product
    Vigor2865ac
    Vendor
    Draytek
    Product
    Vigor2865ac Firmware
    Vendor
    Draytek
    Product
    Vigor2865ax
    Vendor
    Draytek
    Product
    Vigor2865ax Firmware
    Vendor
    Draytek
    Product
    Vigor2865l
    Vendor
    Draytek
    Product
    Vigor2865l Firmware
    Vendor
    Draytek
    Product
    Vigor2865lac
    Vendor
    Draytek
    Product
    Vigor2865lac Firmware
    Vendor
    Draytek
    Product
    Vigor2865vac
    Vendor
    Draytek
    Product
    Vigor2865vac Firmware
    Vendor
    Draytek
    Product
    Vigor2866
    Vendor
    Draytek
    Product
    Vigor2866 Firmware
    Vendor
    Draytek
    Product
    Vigor2866ac
    Vendor
    Draytek
    Product
    Vigor2866ac Firmware
    Vendor
    Draytek
    Product
    Vigor2866ax
    Vendor
    Draytek
    Product
    Vigor2866ax Firmware
    Vendor
    Draytek
    Product
    Vigor2866l
    Vendor
    Draytek
    Product
    Vigor2866l Firmware
    Vendor
    Draytek
    Product
    Vigor2866lac
    Vendor
    Draytek
    Product
    Vigor2866lac Firmware
    Vendor
    Draytek
    Product
    Vigor2866vac
    Vendor
    Draytek
    Product
    Vigor2866vac Firmware
    Vendor
    Draytek
    Product
    Vigor2915
    Vendor
    Draytek
    Product
    Vigor2915 Firmware
    Vendor
    Draytek
    Product
    Vigor2915ac
    Vendor
    Draytek
    Product
    Vigor2915ac Firmware
    Vendor
    Draytek
    Product
    Vigor2925
    Vendor
    Draytek
    Product
    Vigor2925 Firmware
    Vendor
    Draytek
    Product
    Vigor2925ac
    Vendor
    Draytek
    Product
    Vigor2925ac Firmware
    Vendor
    Draytek
    Product
    Vigor2925fn
    Vendor
    Draytek
    Product
    Vigor2925fn Firmware
    Vendor
    Draytek
    Product
    Vigor2925l
    Vendor
    Draytek
    Product
    Vigor2925l Firmware
    Vendor
    Draytek
    Product
    Vigor2925ln
    Vendor
    Draytek
    Product
    Vigor2925ln Firmware
    Vendor
    Draytek
    Product
    Vigor2925n
    Vendor
    Draytek
    Product
    Vigor2925n-plus
    Vendor
    Draytek
    Product
    Vigor2925n-plus Firmware
    Vendor
    Draytek
    Product
    Vigor2925n Firmware
    Vendor
    Draytek
    Product
    Vigor2925vac
    Vendor
    Draytek
    Product
    Vigor2925vac Firmware
    Vendor
    Draytek
    Product
    Vigor2925vn-plus
    Vendor
    Draytek
    Product
    Vigor2925vn-plus Firmware
    Vendor
    Draytek
    Product
    Vigor2926
    Vendor
    Draytek
    Product
    Vigor2926 Firmware
    Vendor
    Draytek
    Product
    Vigor2926ac
    Vendor
    Draytek
    Product
    Vigor2926ac Firmware
    Vendor
    Draytek
    Product
    Vigor2926l
    Vendor
    Draytek
    Product
    Vigor2926l Firmware
    Vendor
    Draytek
    Product
    Vigor2926lac
    Vendor
    Draytek
    Product
    Vigor2926lac Firmware
    Vendor
    Draytek
    Product
    Vigor2926ln
    Vendor
    Draytek
    Product
    Vigor2926ln Firmware
    Vendor
    Draytek
    Product
    Vigor2926n
    Vendor
    Draytek
    Product
    Vigor2926n Firmware
    Vendor
    Draytek
    Product
    Vigor2926vac
    Vendor
    Draytek
    Product
    Vigor2926vac Firmware
    Vendor
    Draytek
    Product
    Vigor2927
    Vendor
    Draytek
    Product
    Vigor2927 Firmware
    Vendor
    Draytek
    Product
    Vigor2927ac
    Vendor
    Draytek
    Product
    Vigor2927ac Firmware
    Vendor
    Draytek
    Product
    Vigor2927ax
    Vendor
    Draytek
    Product
    Vigor2927ax Firmware
    Vendor
    Draytek
    Product
    Vigor2927f
    Vendor
    Draytek
    Product
    Vigor2927f Firmware
    Vendor
    Draytek
    Product
    Vigor2927l
    Vendor
    Draytek
    Product
    Vigor2927l Firmware
    Vendor
    Draytek
    Product
    Vigor2927lac
    Vendor
    Draytek
    Product
    Vigor2927lac Firmware
    Vendor
    Draytek
    Product
    Vigor2927vac
    Vendor
    Draytek
    Product
    Vigor2927vac Firmware
    Vendor
    Draytek
    Product
    Vigor2952
    Vendor
    Draytek
    Product
    Vigor2952 Firmware
    Vendor
    Draytek
    Product
    Vigor2952p
    Vendor
    Draytek
    Product
    Vigor2952p Firmware
    Vendor
    Draytek
    Product
    Vigor2962
    Vendor
    Draytek
    Product
    Vigor2962 Firmware
    Vendor
    Draytek
    Product
    Vigor2962p
    Vendor
    Draytek
    Product
    Vigor2962p Firmware
    Vendor
    Draytek
    Product
    Vigor3220
    Vendor
    Draytek
    Product
    Vigor3220 Firmware
    Vendor
    Draytek
    Product
    Vigor3910
    Vendor
    Draytek
    Product
    Vigor3910 Firmware
    Vendor
    Draytek
    Product
    Vigornic 132
    Vendor
    Draytek
    Product
    Vigornic 132 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-10547 (CVSS 9.8) — An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running Dray…
    CVE-2024-51138 (CVSS 9.8) — Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2…
    CVE-2024-51139 (CVSS 9.8) — Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and…
    CVE-2024-41588 (CVSS 8) — The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buff…
    CVE-2024-41591 (CVSS 6.1) — DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.…
    CVE-2024-41592 (CVSS 8) — DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters …
    CVE-2024-41593 (CVSS 9.8) — DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft…
    CVE-2024-41594 (CVSS 7.5) — An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information becaus…
    CVE-2024-41590 (CVSS 8) — Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds ch…
    CVE-2024-41596 (CVSS 8) — Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI)…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High