CVE-2023-31447
CVE-2023-31447
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Aug 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →