Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.59% | — | Draytek MyvigorDraytek Vigorswitch Pq2200xb FirmwareDraytek Vigorswitch Pq2121x FirmwareDraytek Vigorswitch P2540xs Firmware+68 | 1/6/2023 | 17/6/2026 | Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers… | |
| Analizada | Media (6.1) | 0.36% | — | Draytek Vigor2860 FirmwareDraytek Vigor2860n FirmwareDraytek Vigor2860n-plus FirmwareDraytek Vigor2860vn-plus Firmware+87 | 3/3/2023 | 17/6/2026 | Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766,… | |
| Modificada | Crítica (9.8) | 34% | — | Draytek Vigor3910 FirmwareDraytek Vigor1000b FirmwareDraytek Vigor2962 FirmwareDraytek Vigor2962p Firmware+64 | 29/8/2022 | 17/6/2026 | An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field. |