Vigorap 910c Firmware

vigorap_910c_firmware

Vendor: Draytek • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-28968 1Draytek 13Vigorap 1000c Firmware Vigorap 700 FirmwareVigorap 710 Firmware+10 more Nov 21, 2024 Oct 22, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML vi...Show more Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field.Show less
CVE-2020-3932 1Draytek 1Vigorap 910c Firmware Nov 21, 2024 Apr 15, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage.
CVE-2017-11650 1Draytek 1Vigorap 910c Firmware Nov 21, 2024 Mar 7, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp.
CVE-2017-11649 1Draytek 1Vigorap 910c Firmware Nov 21, 2024 Mar 7, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP...Show more Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp.Show less