CVE-2023-23313
Summary
| CVE | CVE-2023-23313 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-03-03 22:15:00 UTC |
| Updated | 2023-11-07 04:07:00 UTC |
| Description | Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Draytek | Vigor130 | - | All | All | All |
| Operating System | Draytek | Vigor130 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor165 | - | All | All | All |
| Operating System | Draytek | Vigor165 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor166 | - | All | All | All |
| Operating System | Draytek | Vigor166 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2133 | - | All | All | All |
| Hardware | Draytek | Vigor2133ac | - | All | All | All |
| Operating System | Draytek | Vigor2133ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2133fvac | - | All | All | All |
| Operating System | Draytek | Vigor2133fvac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2133n | - | All | All | All |
| Operating System | Draytek | Vigor2133n Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2133vac | - | All | All | All |
| Operating System | Draytek | Vigor2133vac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2133 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135 | - | All | All | All |
| Hardware | Draytek | Vigor2135ac | - | All | All | All |
| Operating System | Draytek | Vigor2135ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135ax | - | All | All | All |
| Operating System | Draytek | Vigor2135ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135fvac | - | All | All | All |
| Operating System | Draytek | Vigor2135fvac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2135vac | - | All | All | All |
| Operating System | Draytek | Vigor2135vac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2135 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2762 | - | All | All | All |
| Hardware | Draytek | Vigor2762ac | - | All | All | All |
| Operating System | Draytek | Vigor2762ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2762n | - | All | All | All |
| Operating System | Draytek | Vigor2762n Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2762vac | - | All | All | All |
| Operating System | Draytek | Vigor2762vac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2762 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2763 | - | All | All | All |
| Hardware | Draytek | Vigor2763ac | - | All | All | All |
| Operating System | Draytek | Vigor2763ac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2763 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2765 | - | All | All | All |
| Hardware | Draytek | Vigor2765ac | - | All | All | All |
| Operating System | Draytek | Vigor2765ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2765ax | - | All | All | All |
| Operating System | Draytek | Vigor2765ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2765va | - | All | All | All |
| Operating System | Draytek | Vigor2765va Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2765 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2766 | - | All | All | All |
| Hardware | Draytek | Vigor2766ac | - | All | All | All |
| Operating System | Draytek | Vigor2766ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2766ax | - | All | All | All |
| Operating System | Draytek | Vigor2766ax Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2766vac | - | All | All | All |
| Operating System | Draytek | Vigor2766vac Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2766 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2832 | - | All | All | All |
| Hardware | Draytek | Vigor2832n | - | All | All | All |
| Operating System | Draytek | Vigor2832n Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2832 Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2860 | - | All | All | All |
| Hardware | Draytek | Vigor2860ac | - | All | All | All |
| Operating System | Draytek | Vigor2860ac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2860l | - | All | All | All |
| Hardware | Draytek | Vigor2860ln | - | All | All | All |
| Operating System | Draytek | Vigor2860ln Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2860l Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2860n | - | All | All | All |
| Hardware | Draytek | Vigor2860n-plus | - | All | All | All |
| Operating System | Draytek | Vigor2860n-plus Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2860n Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2860vac | - | All | All | All |
| Operating System | Draytek | Vigor2860vac Firmware | All | All | All | All |
| Hardware | Draytek | Vigor2860vn-plus | - | All | All | All |
| Operating System | Draytek | Vigor2860vn-plus Firmware | All | All | All | All |
| Operating System | Draytek | Vigor2860 Firmware | All | All | All | All |
| Hardware | Draytek | Vigornic 132 | - | All | All | All |
| Operating System | Draytek | Vigornic 132 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor1000b | - | All | All | All |
| Operating System | Draytek | Virgor1000b Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2862 | - | All | All | All |
| Hardware | Draytek | Virgor2862ac | - | All | All | All |
| Operating System | Draytek | Virgor2862ac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2862b | - | All | All | All |
| Hardware | Draytek | Virgor2862bn | - | All | All | All |
| Operating System | Draytek | Virgor2862bn Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2862b Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2862l | - | All | All | All |
| Hardware | Draytek | Virgor2862lac | - | All | All | All |
| Operating System | Draytek | Virgor2862lac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2862ln | - | All | All | All |
| Operating System | Draytek | Virgor2862ln Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2862l Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2862n | - | All | All | All |
| Operating System | Draytek | Virgor2862n Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2862vac | - | All | All | All |
| Operating System | Draytek | Virgor2862vac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2862 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2865 | - | All | All | All |
| Hardware | Draytek | Virgor2865ac | - | All | All | All |
| Operating System | Draytek | Virgor2865ac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2865ax | - | All | All | All |
| Operating System | Draytek | Virgor2865ax Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2865l | - | All | All | All |
| Hardware | Draytek | Virgor2865lac | - | All | All | All |
| Operating System | Draytek | Virgor2865lac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2865l Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2865vac | - | All | All | All |
| Operating System | Draytek | Virgor2865vac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2865 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2866 | - | All | All | All |
| Hardware | Draytek | Virgor2866ac | - | All | All | All |
| Operating System | Draytek | Virgor2866ac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2866ax | - | All | All | All |
| Operating System | Draytek | Virgor2866ax Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2866l | - | All | All | All |
| Hardware | Draytek | Virgor2866lac | - | All | All | All |
| Operating System | Draytek | Virgor2866lac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2866l Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2866vac | - | All | All | All |
| Operating System | Draytek | Virgor2866vac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2866 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2915 | - | All | All | All |
| Hardware | Draytek | Virgor2915ac | - | All | All | All |
| Operating System | Draytek | Virgor2915ac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2915 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2925 | - | All | All | All |
| Hardware | Draytek | Virgor2925ac | - | All | All | All |
| Operating System | Draytek | Virgor2925ac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2925fn | - | All | All | All |
| Operating System | Draytek | Virgor2925fn Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2925l | - | All | All | All |
| Hardware | Draytek | Virgor2925ln | - | All | All | All |
| Operating System | Draytek | Virgor2925ln Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2925l Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2925n | - | All | All | All |
| Hardware | Draytek | Virgor2925n-plus | - | All | All | All |
| Operating System | Draytek | Virgor2925n-plus Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2925n Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2925vac | - | All | All | All |
| Operating System | Draytek | Virgor2925vac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2925vn-plus | - | All | All | All |
| Operating System | Draytek | Virgor2925vn-plus Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2925 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2926 | - | All | All | All |
| Hardware | Draytek | Virgor2926ac | - | All | All | All |
| Operating System | Draytek | Virgor2926ac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2926l | - | All | All | All |
| Hardware | Draytek | Virgor2926lac | - | All | All | All |
| Operating System | Draytek | Virgor2926lac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2926ln | - | All | All | All |
| Operating System | Draytek | Virgor2926ln Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2926l Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2926n | - | All | All | All |
| Operating System | Draytek | Virgor2926n Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2926vac | - | All | All | All |
| Operating System | Draytek | Virgor2926vac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2926 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2927 | - | All | All | All |
| Hardware | Draytek | Virgor2927ac | - | All | All | All |
| Operating System | Draytek | Virgor2927ac Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2927ax | - | All | All | All |
| Operating System | Draytek | Virgor2927ax Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2927f | - | All | All | All |
| Operating System | Draytek | Virgor2927f Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2927l | - | All | All | All |
| Hardware | Draytek | Virgor2927lac | - | All | All | All |
| Operating System | Draytek | Virgor2927lac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2927l Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2927vac | - | All | All | All |
| Operating System | Draytek | Virgor2927vac Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2927 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2952 | - | All | All | All |
| Hardware | Draytek | Virgor2952p | - | All | All | All |
| Operating System | Draytek | Virgor2952p Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2952 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor2962 | - | All | All | All |
| Hardware | Draytek | Virgor2962p | - | All | All | All |
| Operating System | Draytek | Virgor2962p Firmware | All | All | All | All |
| Operating System | Draytek | Virgor2962 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor3220 | - | All | All | All |
| Operating System | Draytek | Virgor3220 Firmware | All | All | All | All |
| Hardware | Draytek | Virgor3910 | - | All | All | All |
| Operating System | Draytek | Virgor3910 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.horizonconsulting.com/advisories23-Multiple-XSS-Stored-in-DrayTek-routers-CVE-2023-... | MISC | www.horizonconsulting.com | |
| www.horizonsecurity.it/lang_EN/advisories | MISC | www.horizonsecurity.it | |
| Cross-Site Scripting vulnerability (CVE-2023-23313) | DrayTek | www.draytek.com | ||
| vigor3910vigor1000bvigor2962.com | MISC | vigor3910vigor1000bvigor2962.com | |
| Cross-Site Scripting vulnerability (CVE-2023-23313) | DrayTek | MISC | www.draytek.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.