medium6.1
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen.
Impact
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Draytek | Vigor2925 Firmware | Version 3.8.4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
- https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755
- https://www.draytek.com/about/security-advisory/urgent-security-updates-to-draytek-routers
- https://www.facebook.com/Huang.YuHsiang.Phone/posts/1815316691945755