Detections
Analytics
CVE-2022-32548
critical
Description
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
References
https://www.forescout.com/resources/draybreak-draytek-research/
https://github.com/uicres/draytek-RCE
https://github.com/HarleyDoo/CVE-2022-32548-RCE-POC
https://github.com/uisvit/CVE-2022-32548-RCE-MASS
https://github.com/d4rk0x00/CVE-2022-32548-RCE
https://github.com/Xu0Tex1/CVE-2022-32548-RCE-POC
https://github.com/Xu0Tex1/CVE-2022-32548-Mass-Rce
https://github.com/rftg1000/CVE-2022-32548-draytek
https://github.com/alexmention/CVE-2022-32548-RCE-POC
https://github.com/n0zxRY0/CVE-2022-32548-RCE
https://github.com/Administrative2022/CVE-2022-32548-MASS-RCE
https://github.com/rftg1000/CVE-2022-32548-POC-RCE
https://github.com/rftg1000/CVE-2022-32548-MASS-RCE
https://github.com/rftg1000/CVE-2022-32548-RCE
https://github.com/Administrative2022/CVE-2022-32548-RCE
https://github.com/rftg1000/CVE-2022-32548-RCE-POC
https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html
https://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers