CVE-2023-6265

DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal

State: Published
Severity: 6.5 Medium
Published: Nov 22, 2023
Updated: Aug 2, 2024
Reserved: Nov 22, 2023

Description

** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	cisa-cg

Weaknesses

CWE-22 Path Traversal

Affected Products

Product	Versions
Vigor2960DrayTek	1.5.1.4Affected 1.5.1.5Affected

References

https://github.com/xxy1126/Vuln/blob/main/Draytek/4.mdexploit
https://www.draytek.com/products/vigor2960/product
https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.