Draytek Vigor2960 Firmware 1.5.1.5
Approved changes feed: RSS · Atom
cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.5:*:*:*:*:*:*:*
part: o version: 1.5.1.5 update: *
| Vendor | Draytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7) |
|---|---|
| Product | Vigor2960 Firmware (042f9857-a251-537e-a0c8-63a1ead6847c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6265 |
vulnerable | 2026-06-08 06:19:46.805018 |
DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal
MEDIUM (6.5)
** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.
Published: 2023-11-22T19:47:07.692Z
Updated: 2024-08-02T08:28:20.179Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.