Stack-based Buffer Overflow in Draytek Vigor Devices (Issue 1 of 3)

Stack-based Buffer Overflow in Draytek Vigor Devices (Issue 1 of 3)

CVE-2020-10823 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 1 of 3).

Learn more about our Web Application Penetration Testing UK.