CVE-2022-32548 : An issue was discovered on certain DrayTek Vigor routers before July 2022 such a

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

Published 2022-08-29 06:15:09

Updated 2022-09-01 19:56:26

Source MITRE

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2022-32548

Draytek » Vigor3910 Firmware
Versions before (<) 4.3.1.1
cpe:2.3:o:draytek:vigor3910_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor3910 » Version: N/A
Draytek » Vigor1000b Firmware
Versions before (<) 4.3.1.1
cpe:2.3:o:draytek:vigor1000b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor1000b » Version: N/A
Draytek » Vigor2962 Firmware
Versions before (<) 4.3.1.1
cpe:2.3:o:draytek:vigor2962_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2962 » Version: N/A
Draytek » Vigor2962p Firmware
Versions before (<) 4.3.1.1
cpe:2.3:o:draytek:vigor2962p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2962p » Version: N/A
Draytek » Vigor2927 Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2927_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2927 » Version: N/A
Draytek » Vigor2927ax Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2927ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2927ax » Version: N/A
Draytek » Vigor2927ac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2927ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2927ac » Version: N/A
Draytek » Vigor2927vac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2927vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2927vac » Version: N/A
Draytek » Vigor2927l Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2927l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2927l » Version: N/A
Draytek » Vigor2927lac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2927lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2927lac » Version: N/A
Draytek » Vigor2915 Firmware
Versions before (<) 4.3.3.2
cpe:2.3:o:draytek:vigor2915_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2915 » Version: N/A
Draytek » Vigor2915ac Firmware
Versions before (<) 4.3.3.2
cpe:2.3:o:draytek:vigor2915ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2915ac » Version: N/A
Draytek » Vigor2952 Firmware
Versions before (<) 3.9.7.2
cpe:2.3:o:draytek:vigor2952_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2952 » Version: N/A
Draytek » Vigor2952p Firmware
Versions before (<) 3.9.7.2
cpe:2.3:o:draytek:vigor2952p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2952p » Version: N/A
Draytek » Vigor3220 Firmware
Versions before (<) 3.9.7.2
cpe:2.3:o:draytek:vigor3220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor3220 » Version: N/A
Draytek » Vigor2926 Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926 » Version: N/A
Draytek » Vigor2926n Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926n » Version: N/A
Draytek » Vigor2926ac Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926ac » Version: N/A
Draytek » Vigor2926vac Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926vac » Version: N/A
Draytek » Vigor2926l Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926l » Version: N/A
Draytek » Vigor2926ln Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926ln » Version: N/A
Draytek » Vigor2926lac Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2926lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2926lac » Version: N/A
Draytek » Vigor2862 Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862 » Version: N/A
Draytek » Vigor2862n Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862n » Version: N/A
Draytek » Vigor2862ac Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862ac » Version: N/A
Draytek » Vigor2862vac Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862vac » Version: N/A
Draytek » Vigor2862b Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862b » Version: N/A
Draytek » Vigor2862bn Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862bn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862bn » Version: N/A
Draytek » Vigor2862l Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862l » Version: N/A
Draytek » Vigor2862ln Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862ln » Version: N/A
Draytek » Vigor2862lac Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2862lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2862lac » Version: N/A
Draytek » Vigor2620l Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2620l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2620l » Version: N/A
Draytek » Vigor2620ln Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigor2620ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2620ln » Version: N/A
Draytek » Vigorlte 200n Firmware
Versions before (<) 3.9.8.1
cpe:2.3:o:draytek:vigorlte_200n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigorlte 200n » Version: N/A
Draytek » Vigor2133 Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133 » Version: N/A
Draytek » Vigor2133n Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2133n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133n » Version: N/A
Draytek » Vigor2133ac Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2133ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133ac » Version: N/A
Draytek » Vigor2133vac Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2133vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133vac » Version: N/A
Draytek » Vigor2133fvac Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2133fvac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133fvac » Version: N/A
Draytek » Vigor2762 Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762 » Version: N/A
Draytek » Vigor2762n Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2762n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762n » Version: N/A
Draytek » Vigor2762ac Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2762ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762ac » Version: N/A
Draytek » Vigor2762vac Firmware
Versions before (<) 3.9.6.4
cpe:2.3:o:draytek:vigor2762vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762vac » Version: N/A
Draytek » Vigor165 Firmware
Versions before (<) 4.2.4
cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor165 » Version: N/A
Draytek » Vigor166 Firmware
Versions before (<) 4.2.4
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor166 » Version: N/A
Draytek » Vigor2135 Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135 » Version: N/A
Draytek » Vigor2135ac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2135ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135ac » Version: N/A
Draytek » Vigor2135vac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2135vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135vac » Version: N/A
Draytek » Vigor2135fvac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2135fvac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135fvac » Version: N/A
Draytek » Vigor2765 Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765 » Version: N/A
Draytek » Vigor2765ac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2765ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765ac » Version: N/A
Draytek » Vigor2765vac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2765vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765vac » Version: N/A
Draytek » Vigor2766 Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766 » Version: N/A
Draytek » Vigor2766ac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2766ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766ac » Version: N/A
Draytek » Vigor2766vac Firmware
Versions before (<) 4.4.2
cpe:2.3:o:draytek:vigor2766vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766vac » Version: N/A
Draytek » Vigor2832 Firmware
Versions before (<) 3.9.6
cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2832 » Version: N/A
Draytek » Vigor2865 Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2865_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2865 » Version: N/A
Draytek » Vigor2865ax Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2865ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2865ax » Version: N/A
Draytek » Vigor2865ac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2865ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2865ac » Version: N/A
Draytek » Vigor2865vac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2865vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2865vac » Version: N/A
Draytek » Vigor2865l Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2865l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2865l » Version: N/A
Draytek » Vigor2865lac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2865lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2865lac » Version: N/A
Draytek » Vigor2866 Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2866_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2866 » Version: N/A
Draytek » Vigor2866ax Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2866ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2866ax » Version: N/A
Draytek » Vigor2866ac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2866ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2866ac » Version: N/A
Draytek » Vigor2866vac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2866vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2866vac » Version: N/A
Draytek » Vigor2866l Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2866l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2866l » Version: N/A
Draytek » Vigor2866lac Firmware
Versions before (<) 4.4.0
cpe:2.3:o:draytek:vigor2866lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2866lac » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-32548

EPSS FAQ

0.18%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 55 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-32548

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	3.9	6.0	MITRE
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-32548

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-32548

https://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers

SMBs Exposed to Attacks by Critical Vulnerability in DrayTek Vigor Routers | SecurityWeek.Com
Exploit;Third Party Advisory
https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html

Unauthenticated Remote Code Execution in a Wide Range of DrayTek Vigor Routers
Exploit;Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-32548

Products affected by CVE-2022-32548

Exploit prediction scoring system (EPSS) score for CVE-2022-32548

CVSS scores for CVE-2022-32548

CWE ids for CVE-2022-32548

References for CVE-2022-32548