Approved changes feed: RSS · Atom

cpe:2.3:h:draytek:vigorap_910c:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDraytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7)
ProductVigorap 910C (9b61e46c-571e-5ba8-bde6-f6edb7320cee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-3932 not_vulnerable 2026-06-08 05:25:57.929253 Draytek VigorAP910C - Information Leakage
HIGH (7.5)
A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage.
Published: 2020-04-15T06:20:24.488Z
Updated: 2024-09-16T22:51:54.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28968 not_vulnerable 2026-06-08 05:23:56.695277 Details available
Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field.
Published: 2021-10-22T19:20:05.000Z
Updated: 2024-08-04T16:48:00.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11650 not_vulnerable 2026-06-08 05:08:38.226240 Details available
Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp.
Published: 2018-03-06T22:00:00.000Z
Updated: 2024-08-05T18:12:40.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11649 not_vulnerable 2026-06-08 05:08:38.225822 Details available
Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp.
Published: 2018-03-06T22:00:00.000Z
Updated: 2024-08-05T18:12:40.570Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.