Approved changes feed: RSS · Atom

cpe:2.3:h:draytek:vigorlte_200n:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDraytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7)
ProductVigorlte 200N (c8405f56-3134-56b4-99be-7d76de2b9a1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33778 not_vulnerable 2026-06-08 06:06:23.477582 Details available
Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their own account. Attackers are then able to create WCF and DrayDDNS licenses and synchronize them from the website.
Published: 2023-06-01T00:00:00.000Z
Updated: 2025-01-09T17:24:35.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32548 not_vulnerable 2026-06-08 05:44:45.052841 Details available
CRITICAL (10)
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
Published: 2022-08-29T05:38:35.000Z
Updated: 2024-08-03T07:46:43.481Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.