CVE-2023-23313

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-23313
Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/
https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313
https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/
https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:draytek:vigor2860n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860n:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:draytek:vigor2860n-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860n-plus:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:draytek:vigor2860vn-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860vn-plus:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:draytek:vigor2860ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860ac:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:draytek:vigor2860vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860vac:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:draytek:vigor2860l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860l:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:draytek:vigor2860ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860ln:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:draytek:vigor2832n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2832n:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:draytek:vigor2766ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766ax:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:draytek:vigor2766ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766ac:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:draytek:vigor2766vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766vac:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:draytek:vigor2765ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765ax:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:draytek:vigor2765ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765ac:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:draytek:vigor2765va_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765va:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:draytek:vigor2763ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2763ac:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:draytek:vigor2762n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762n:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:draytek:vigor2762ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762ac:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:draytek:vigor2762vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762vac:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:draytek:vigor2135ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135ax:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:draytek:vigor2135ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135ac:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:draytek:vigor2135vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135vac:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:draytek:vigor2135fvac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135fvac:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:draytek:vigor2133n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133n:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:draytek:vigor2133ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133ac:-:*:*:*:*:*:*:*

Configuration 33 (hide)

AND
cpe:2.3:o:draytek:vigor2133vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133vac:-:*:*:*:*:*:*:*

Configuration 34 (hide)

AND
cpe:2.3:o:draytek:vigor2133fvac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133fvac:-:*:*:*:*:*:*:*

Configuration 35 (hide)

AND
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*

Configuration 36 (hide)

AND
cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*

Configuration 37 (hide)

AND
cpe:2.3:o:draytek:vigor130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor130:-:*:*:*:*:*:*:*

Configuration 38 (hide)

AND
cpe:2.3:o:draytek:vigornic_132_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigornic_132:-:*:*:*:*:*:*:*

Configuration 39 (hide)

AND
cpe:2.3:o:draytek:virgor3910_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor3910:-:*:*:*:*:*:*:*

Configuration 40 (hide)

AND
cpe:2.3:o:draytek:virgor3220_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor3220:-:*:*:*:*:*:*:*

Configuration 41 (hide)

AND
cpe:2.3:o:draytek:virgor2962_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2962:-:*:*:*:*:*:*:*

Configuration 42 (hide)

AND
cpe:2.3:o:draytek:virgor2962p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2962p:-:*:*:*:*:*:*:*

Configuration 43 (hide)

AND
cpe:2.3:o:draytek:virgor1000b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor1000b:-:*:*:*:*:*:*:*

Configuration 44 (hide)

AND
cpe:2.3:o:draytek:virgor2952_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2952:-:*:*:*:*:*:*:*

Configuration 45 (hide)

AND
cpe:2.3:o:draytek:virgor2952p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2952p:-:*:*:*:*:*:*:*

Configuration 46 (hide)

AND
cpe:2.3:o:draytek:virgor2927_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927:-:*:*:*:*:*:*:*

Configuration 47 (hide)

AND
cpe:2.3:o:draytek:virgor2927ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927ax:-:*:*:*:*:*:*:*

Configuration 48 (hide)

AND
cpe:2.3:o:draytek:virgor2927ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927ac:-:*:*:*:*:*:*:*

Configuration 49 (hide)

AND
cpe:2.3:o:draytek:virgor2927vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927vac:-:*:*:*:*:*:*:*

Configuration 50 (hide)

AND
cpe:2.3:o:draytek:virgor2927f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927f:-:*:*:*:*:*:*:*

Configuration 51 (hide)

AND
cpe:2.3:o:draytek:virgor2927l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927l:-:*:*:*:*:*:*:*

Configuration 52 (hide)

AND
cpe:2.3:o:draytek:virgor2927lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927lac:-:*:*:*:*:*:*:*

Configuration 53 (hide)

AND
cpe:2.3:o:draytek:virgor2926_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926:-:*:*:*:*:*:*:*

Configuration 54 (hide)

AND
cpe:2.3:o:draytek:virgor2926n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926n:-:*:*:*:*:*:*:*

Configuration 55 (hide)

AND
cpe:2.3:o:draytek:virgor2926ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926ac:-:*:*:*:*:*:*:*

Configuration 56 (hide)

AND
cpe:2.3:o:draytek:virgor2926vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926vac:-:*:*:*:*:*:*:*

Configuration 57 (hide)

AND
cpe:2.3:o:draytek:virgor2926l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926l:-:*:*:*:*:*:*:*

Configuration 58 (hide)

AND
cpe:2.3:o:draytek:virgor2926ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926ln:-:*:*:*:*:*:*:*

Configuration 59 (hide)

AND
cpe:2.3:o:draytek:virgor2926lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926lac:-:*:*:*:*:*:*:*

Configuration 60 (hide)

AND
cpe:2.3:o:draytek:virgor2925_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925:-:*:*:*:*:*:*:*

Configuration 61 (hide)

AND
cpe:2.3:o:draytek:virgor2925n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925n:-:*:*:*:*:*:*:*

Configuration 62 (hide)

AND
cpe:2.3:o:draytek:virgor2925n-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925n-plus:-:*:*:*:*:*:*:*

Configuration 63 (hide)

AND
cpe:2.3:o:draytek:virgor2925vn-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925vn-plus:-:*:*:*:*:*:*:*

Configuration 64 (hide)

AND
cpe:2.3:o:draytek:virgor2925ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925ac:-:*:*:*:*:*:*:*

Configuration 65 (hide)

AND
cpe:2.3:o:draytek:virgor2925vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925vac:-:*:*:*:*:*:*:*

Configuration 66 (hide)

AND
cpe:2.3:o:draytek:virgor2925fn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925fn:-:*:*:*:*:*:*:*

Configuration 67 (hide)

AND
cpe:2.3:o:draytek:virgor2925l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925l:-:*:*:*:*:*:*:*

Configuration 68 (hide)

AND
cpe:2.3:o:draytek:virgor2925ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925ln:-:*:*:*:*:*:*:*

Configuration 69 (hide)

AND
cpe:2.3:o:draytek:virgor2915_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2915:-:*:*:*:*:*:*:*

Configuration 70 (hide)

AND
cpe:2.3:o:draytek:virgor2915ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2915ac:-:*:*:*:*:*:*:*

Configuration 71 (hide)

AND
cpe:2.3:o:draytek:virgor2866_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866:-:*:*:*:*:*:*:*

Configuration 72 (hide)

AND
cpe:2.3:o:draytek:virgor2866ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866ax:-:*:*:*:*:*:*:*

Configuration 73 (hide)

AND
cpe:2.3:o:draytek:virgor2866ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866ac:-:*:*:*:*:*:*:*

Configuration 74 (hide)

AND
cpe:2.3:o:draytek:virgor2866vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866vac:-:*:*:*:*:*:*:*

Configuration 75 (hide)

AND
cpe:2.3:o:draytek:virgor2866l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866l:-:*:*:*:*:*:*:*

Configuration 76 (hide)

AND
cpe:2.3:o:draytek:virgor2866lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866lac:-:*:*:*:*:*:*:*

Configuration 77 (hide)

AND
cpe:2.3:o:draytek:virgor2865_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865:-:*:*:*:*:*:*:*

Configuration 78 (hide)

AND
cpe:2.3:o:draytek:virgor2865ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865ax:-:*:*:*:*:*:*:*

Configuration 79 (hide)

AND
cpe:2.3:o:draytek:virgor2865ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865ac:-:*:*:*:*:*:*:*

Configuration 80 (hide)

AND
cpe:2.3:o:draytek:virgor2865vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865vac:-:*:*:*:*:*:*:*

Configuration 81 (hide)

AND
cpe:2.3:o:draytek:virgor2865l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865l:-:*:*:*:*:*:*:*

Configuration 82 (hide)

AND
cpe:2.3:o:draytek:virgor2865lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865lac:-:*:*:*:*:*:*:*

Configuration 83 (hide)

AND
cpe:2.3:o:draytek:virgor2862_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862:-:*:*:*:*:*:*:*

Configuration 84 (hide)

AND
cpe:2.3:o:draytek:virgor2862n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862n:-:*:*:*:*:*:*:*

Configuration 85 (hide)

AND
cpe:2.3:o:draytek:virgor2862ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862ac:-:*:*:*:*:*:*:*

Configuration 86 (hide)

AND
cpe:2.3:o:draytek:virgor2862vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862vac:-:*:*:*:*:*:*:*

Configuration 87 (hide)

AND
cpe:2.3:o:draytek:virgor2862b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862b:-:*:*:*:*:*:*:*

Configuration 88 (hide)

AND
cpe:2.3:o:draytek:virgor2862bn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862bn:-:*:*:*:*:*:*:*

Configuration 89 (hide)

AND
cpe:2.3:o:draytek:virgor2862l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862l:-:*:*:*:*:*:*:*

Configuration 90 (hide)

AND
cpe:2.3:o:draytek:virgor2862ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862ln:-:*:*:*:*:*:*:*

Configuration 91 (hide)

AND
cpe:2.3:o:draytek:virgor2862lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862lac:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:45

Type Values Removed Values Added
References () https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/ - () https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-%28cve-2023-23313%29/ -
References () https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313 - () https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313 -

19 May 2023, 14:15

Type Values Removed Values Added
References
  • {'url': 'https://www.horizonsecurity.it/lang_EN/advisories/?a=22&title=Multiple+XSS+Stored+in+DrayTek+routers+web+interface++CVE202323313', 'name': 'https://www.horizonsecurity.it/lang_EN/advisories/?a=22&title=Multiple+XSS+Stored+in+DrayTek+routers+web+interface++CVE202323313', 'tags': ['Third Party Advisory'], 'refsource': 'MISC'}
  • (MISC) https://www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-23313 -

10 Mar 2023, 14:52

Type Values Removed Values Added
References
  • {'url': 'http://vigor3910vigor1000bvigor2962.com', 'name': 'http://vigor3910vigor1000bvigor2962.com', 'tags': [], 'refsource': 'MISC'}
  • (MISC) https://www.horizonsecurity.it/lang_EN/advisories/?a=22&title=Multiple+XSS+Stored+in+DrayTek+routers+web+interface++CVE202323313 - Third Party Advisory
References (MISC) https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-(cve-2023-23313)/ - (MISC) https://www.draytek.com/about/security-advisory/cross-site-scripting-vulnerability-(cve-2023-23313)/ - Vendor Advisory
CPE cpe:2.3:h:draytek:virgor2862:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2865ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2832_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766ax:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862l:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865l:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2133vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2865ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2865vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927l:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2766_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2763ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766ac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2766vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2133ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135fvac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2865lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2766ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862bn:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2763ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2135ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2952_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2135fvac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925fn:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860l:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925l:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2952p:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2915ac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862lac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2765ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2915ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2832n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925n-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765ax:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2866lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927lac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2766ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2866_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925n:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862n:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2133n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2866ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133n:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2962_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor166:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925fn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2915_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2866ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2765ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2762ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2952:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862ln:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860vn-plus:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor166_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926vac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860n-plus:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860vn-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor3910_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865lac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925vn-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927f:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866ax:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor130:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2135ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765va:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor3220:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor165_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2763:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862b:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor165:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor3220_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925vn-plus:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2962p:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2832:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862ln_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927ac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigornic_132:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigornic_132_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor130_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765ac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2832n:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925n-plus:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2763_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2133_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2862ac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2765va_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2762_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135ax:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor1000b:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862lac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2866l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860ac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860n-plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926l:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2765_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926lac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2762vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2762n:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2135vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2925ln:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2962:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2925_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2865l_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927vac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926n:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2865_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2865ax:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133fvac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2926ln:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862bn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2133fvac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860n:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2927ax:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2133vac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2860vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2765:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2762n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:vigor2135_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2866vac_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866lac:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2927ax_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2962p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2915:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor2866l:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2952p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2860ln:-:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor1000b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2862b_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:draytek:virgor2926_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2766vac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:vigor2135ac:-:*:*:*:*:*:*:*
cpe:2.3:h:draytek:virgor3910:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1
CWE CWE-79

03 Mar 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-03-03 22:15

Updated : 2024-11-21 07:45

NVD link : CVE-2023-23313

Mitre link : CVE-2023-23313

CVE.ORG link : CVE-2023-23313

JSON object : View

Products Affected

draytek

  • vigor2765va
  • vigor2766_firmware
  • virgor2862lac
  • vigor2832n_firmware
  • vigor2763_firmware
  • vigor166_firmware
  • virgor2866ac
  • virgor2865_firmware
  • virgor2862b_firmware
  • vigor2860vn-plus_firmware
  • vigornic_132
  • virgor2926ln
  • vigor2765
  • vigor2762ac
  • vigor2762n_firmware
  • virgor2865vac
  • virgor3220
  • vigor2765va_firmware
  • virgor2927lac_firmware
  • vigor2762
  • vigor2860
  • vigor2763ac
  • virgor2927ax
  • vigor2135fvac
  • vigor2135
  • vigor2765ax
  • virgor2866l
  • virgor2865lac
  • virgor2865ac_firmware
  • vigor2860n-plus
  • vigor130
  • virgor2915_firmware
  • virgor2866ac_firmware
  • virgor2925l
  • virgor2862b
  • virgor2927
  • vigor2860ln_firmware
  • virgor2927lac
  • virgor2926vac
  • vigor2860ln
  • vigor2133_firmware
  • virgor2866ax
  • vigor2135vac_firmware
  • vigor2765ac
  • virgor2926ac_firmware
  • vigor2860l
  • vigor2133
  • virgor2925fn_firmware
  • virgor2862bn_firmware
  • virgor2925l_firmware
  • vigor2860n
  • vigor2135ax_firmware
  • vigor2860vac_firmware
  • virgor2925n
  • virgor2865
  • virgor2927ac
  • virgor2862l
  • vigor2860ac
  • virgor2866l_firmware
  • virgor2915
  • virgor2862ln
  • vigor2860vn-plus
  • vigor2763
  • vigor2133ac
  • vigor2763ac_firmware
  • virgor2962p
  • virgor2927ax_firmware
  • vigor2133fvac_firmware
  • virgor2952p
  • virgor2927l
  • virgor2926ln_firmware
  • vigor2135fvac_firmware
  • virgor2926lac_firmware
  • virgor2866_firmware
  • vigor2766ax
  • virgor2862vac_firmware
  • virgor3910_firmware
  • virgor2962_firmware
  • virgor2926n
  • virgor2926l_firmware
  • virgor2925
  • virgor2866lac
  • virgor2952
  • vigor166
  • virgor3910
  • vigor2133fvac
  • virgor2926l
  • virgor2926vac_firmware
  • vigor2860_firmware
  • vigor2762ac_firmware
  • virgor2862bn
  • virgor2862ln_firmware
  • virgor2962p_firmware
  • virgor2925ac_firmware
  • virgor2866
  • vigor2762vac
  • vigor2762_firmware
  • vigor165
  • vigor2832_firmware
  • virgor2925ln
  • vigor2766
  • vigor2135vac
  • virgor2927vac_firmware
  • virgor2925_firmware
  • virgor2925vac
  • vigor130_firmware
  • virgor2926_firmware
  • virgor2927l_firmware
  • virgor2866lac_firmware
  • virgor2926lac
  • vigor2860l_firmware
  • virgor2962
  • virgor2865vac_firmware
  • vigor2133ac_firmware
  • virgor2925n-plus
  • virgor2865l
  • virgor2862l_firmware
  • vigor2135ax
  • vigor2135ac
  • vigor2762n
  • virgor2925n-plus_firmware
  • virgor2865ac
  • virgor2866vac
  • virgor2927ac_firmware
  • virgor2866vac_firmware
  • virgor2865lac_firmware
  • vigor2135ac_firmware
  • virgor2952_firmware
  • virgor3220_firmware
  • virgor2915ac_firmware
  • vigor165_firmware
  • virgor2925vn-plus_firmware
  • virgor2927vac
  • virgor2926ac
  • vigor2766ax_firmware
  • virgor2862vac
  • vigor2860vac
  • vigor2133vac_firmware
  • virgor2952p_firmware
  • virgor2866ax_firmware
  • vigor2766ac
  • vigor2860ac_firmware
  • vigor2135_firmware
  • virgor1000b
  • vigor2762vac_firmware
  • virgor2862
  • virgor1000b_firmware
  • virgor2915ac
  • virgor2925n_firmware
  • vigor2860n_firmware
  • vigor2133n_firmware
  • virgor2862ac_firmware
  • virgor2862lac_firmware
  • virgor2926n_firmware
  • vigor2766vac_firmware
  • vigor2766ac_firmware
  • vigor2133n
  • virgor2927f_firmware
  • vigor2765_firmware
  • vigor2860n-plus_firmware
  • vigor2765ax_firmware
  • virgor2927f
  • virgor2925ac
  • virgor2925fn
  • virgor2862n_firmware
  • virgor2862n
  • vigor2766vac
  • virgor2865ax
  • virgor2862ac
  • virgor2925vac_firmware
  • virgor2865ax_firmware
  • virgor2925ln_firmware
  • virgor2865l_firmware
  • virgor2925vn-plus
  • virgor2927_firmware
  • vigor2133vac
  • vigor2832n
  • virgor2862_firmware
  • virgor2926
  • vigor2832
  • vigornic_132_firmware
  • vigor2765ac_firmware
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')