medium6.1
CVE-2019-16533
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS.
Impact
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Draytek | Vigor2925 Firmware | Version 3.8.4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
- https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755
- https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
- https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755