CVE-2023-23313 : Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wl

Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.

Published 2023-03-03 22:15:10

Updated 2025-03-07 17:15:16

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2023-23313

Draytek » Vigor2133 Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133 » Version: N/A
Draytek » Vigor2133n Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2133n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133n » Version: N/A
Draytek » Vigor2133ac Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2133ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133ac » Version: N/A
Draytek » Vigor2133vac Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2133vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133vac » Version: N/A
Draytek » Vigor2133fvac Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2133fvac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2133fvac » Version: N/A
Draytek » Vigor2762 Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762 » Version: N/A
Draytek » Vigor2762n Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2762n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762n » Version: N/A
Draytek » Vigor2762ac Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2762ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762ac » Version: N/A
Draytek » Vigor2762vac Firmware
Versions before (<) 3.9.6.5
cpe:2.3:o:draytek:vigor2762vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2762vac » Version: N/A
Draytek » Vigor165 Firmware
Versions before (<) 4.2.4.1
cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor165 » Version: N/A
Draytek » Vigor166 Firmware
Versions before (<) 4.2.4.1
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor166 » Version: N/A
Draytek » Vigor2135 Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135 » Version: N/A
Draytek » Vigor2135ac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2135ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135ac » Version: N/A
Draytek » Vigor2135vac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2135vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135vac » Version: N/A
Draytek » Vigor2135fvac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2135fvac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135fvac » Version: N/A
Draytek » Vigor2765 Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765 » Version: N/A
Draytek » Vigor2765ac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2765ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765ac » Version: N/A
Draytek » Vigor2766 Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766 » Version: N/A
Draytek » Vigor2766ac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2766ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766ac » Version: N/A
Draytek » Vigor2766vac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2766vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766vac » Version: N/A
Draytek » Vigor2832 Firmware
Versions before (<) 3.9.6.3
cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2832 » Version: N/A
Draytek » Vigor2860 Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860 » Version: N/A
Draytek » Vigor2860n Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860n » Version: N/A
Draytek » Vigor2860n-plus Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860n-plus_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860n-plus » Version: N/A
Draytek » Vigor2860vn-plus Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860vn-plus_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860vn-plus » Version: N/A
Draytek » Vigor2860ac Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860ac » Version: N/A
Draytek » Vigor2860vac Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860vac » Version: N/A
Draytek » Vigor2860l Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860l » Version: N/A
Draytek » Vigor2860ln Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:vigor2860ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2860ln » Version: N/A
Draytek » Vigor2832n Firmware
Versions before (<) 3.9.6.3
cpe:2.3:o:draytek:vigor2832n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2832n » Version: N/A
Draytek » Vigor2766ax Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2766ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2766ax » Version: N/A
Draytek » Vigor2765ax Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2765ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765ax » Version: N/A
Draytek » Vigor2765va Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2765va_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2765va » Version: N/A
Draytek » Vigor2763 Firmware
Versions before (<) 4.4.2.2
cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2763 » Version: N/A
Draytek » Vigor2763ac Firmware
Versions before (<) 4.4.2.2
cpe:2.3:o:draytek:vigor2763ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2763ac » Version: N/A
Draytek » Vigor2135ax Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:vigor2135ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor2135ax » Version: N/A
Draytek » Vigor130 Firmware
Versions before (<) 3.8.5.1
cpe:2.3:o:draytek:vigor130_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigor130 » Version: N/A
Draytek » Vigornic 132 Firmware
Versions before (<) 3.8.5.1
cpe:2.3:o:draytek:vigornic_132_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Vigornic 132 » Version: N/A
Draytek » Virgor3910 Firmware
Versions before (<) 4.3.2.2
cpe:2.3:o:draytek:virgor3910_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor3910 » Version: N/A
Draytek » Virgor3220 Firmware
Versions before (<) 3.9.7.4
cpe:2.3:o:draytek:virgor3220_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor3220 » Version: N/A
Draytek » Virgor2962 Firmware
Versions before (<) 4.3.2.2
cpe:2.3:o:draytek:virgor2962_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2962 » Version: N/A
Draytek » Virgor2962p Firmware
Versions before (<) 4.3.2.2
cpe:2.3:o:draytek:virgor2962p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2962p » Version: N/A
Draytek » Virgor1000b Firmware
Versions before (<) 4.3.2.2
cpe:2.3:o:draytek:virgor1000b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor1000b » Version: N/A
Draytek » Virgor2952 Firmware
Versions before (<) 3.9.7.4
cpe:2.3:o:draytek:virgor2952_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2952 » Version: N/A
Draytek » Virgor2952p Firmware
Versions before (<) 3.9.7.4
cpe:2.3:o:draytek:virgor2952p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2952p » Version: N/A
Draytek » Virgor2927 Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927 » Version: N/A
Draytek » Virgor2927ax Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927ax » Version: N/A
Draytek » Virgor2927ac Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927ac » Version: N/A
Draytek » Virgor2927vac Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927vac » Version: N/A
Draytek » Virgor2927f Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927f » Version: N/A
Draytek » Virgor2927l Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927l » Version: N/A
Draytek » Virgor2927lac Firmware
Versions before (<) 4.4.2.3
cpe:2.3:o:draytek:virgor2927lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2927lac » Version: N/A
Draytek » Virgor2926 Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926 » Version: N/A
Draytek » Virgor2926n Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926n » Version: N/A
Draytek » Virgor2926ac Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926ac » Version: N/A
Draytek » Virgor2926vac Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926vac » Version: N/A
Draytek » Virgor2926l Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926l » Version: N/A
Draytek » Virgor2926ln Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926ln » Version: N/A
Draytek » Virgor2926lac Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2926lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2926lac » Version: N/A
Draytek » Virgor2925 Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925 » Version: N/A
Draytek » Virgor2925n Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925n » Version: N/A
Draytek » Virgor2925n-plus Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925n-plus_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925n-plus » Version: N/A
Draytek » Virgor2925vn-plus Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925vn-plus_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925vn-plus » Version: N/A
Draytek » Virgor2925ac Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925ac » Version: N/A
Draytek » Virgor2925vac Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925vac » Version: N/A
Draytek » Virgor2925fn Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925fn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925fn » Version: N/A
Draytek » Virgor2925l Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925l » Version: N/A
Draytek » Virgor2925ln Firmware
Versions before (<) 3.9.4
cpe:2.3:o:draytek:virgor2925ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2925ln » Version: N/A
Draytek » Virgor2915 Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:virgor2915_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2915 » Version: N/A
Draytek » Virgor2915ac Firmware
Versions before (<) 4.4.2.1
cpe:2.3:o:draytek:virgor2915ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2915ac » Version: N/A
Draytek » Virgor2866 Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2866_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2866 » Version: N/A
Draytek » Virgor2866ax Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2866ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2866ax » Version: N/A
Draytek » Virgor2866ac Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2866ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2866ac » Version: N/A
Draytek » Virgor2866vac Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2866vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2866vac » Version: N/A
Draytek » Virgor2866l Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2866l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2866l » Version: N/A
Draytek » Virgor2866lac Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2866lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2866lac » Version: N/A
Draytek » Virgor2865 Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2865_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2865 » Version: N/A
Draytek » Virgor2865ax Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2865ax_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2865ax » Version: N/A
Draytek » Virgor2865ac Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2865ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2865ac » Version: N/A
Draytek » Virgor2865vac Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2865vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2865vac » Version: N/A
Draytek » Virgor2865l Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2865l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2865l » Version: N/A
Draytek » Virgor2865lac Firmware
Versions before (<) 4.4.1.1
cpe:2.3:o:draytek:virgor2865lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2865lac » Version: N/A
Draytek » Virgor2862 Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862 » Version: N/A
Draytek » Virgor2862n Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862n » Version: N/A
Draytek » Virgor2862ac Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862ac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862ac » Version: N/A
Draytek » Virgor2862vac Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862vac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862vac » Version: N/A
Draytek » Virgor2862b Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862b » Version: N/A
Draytek » Virgor2862bn Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862bn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862bn » Version: N/A
Draytek » Virgor2862l Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862l_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862l » Version: N/A
Draytek » Virgor2862ln Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862ln_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862ln » Version: N/A
Draytek » Virgor2862lac Firmware
Versions before (<) 3.9.9.1
cpe:2.3:o:draytek:virgor2862lac_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Draytek » Virgor2862lac » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-23313

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 37 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-23313

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-03-07
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None
6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	2.8	2.7	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: Low Integrity: Low Availability: None

CWE ids for CVE-2023-23313

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2023-23313

https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313

Multiple XSS (Stored) in DrayTek routers - CVE-2023-23313 | Horizon Consulting
https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/

Cross-Site Scripting vulnerability (CVE-2023-23313) | DrayTek
https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-(cve-2023-23313)/

Cross-Site Scripting vulnerability (CVE-2023-23313) | DrayTek
Vendor Advisory

Jump to

Vulnerability Details : CVE-2023-23313

Products affected by CVE-2023-23313

Exploit prediction scoring system (EPSS) score for CVE-2023-23313

CVSS scores for CVE-2023-23313

CWE ids for CVE-2023-23313

References for CVE-2023-23313