DrayTek Vigor 2700 ADSL Router Remote Command Injection Vulnerability
BID:63271
Info
DrayTek Vigor 2700 ADSL Router Remote Command Injection Vulnerability
| Bugtraq ID: | 63271 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5703 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 22 2013 12:00AM |
| Updated: | Oct 22 2013 12:00AM |
| Credit: | Juraj Kosik |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
DrayTek Vigor 2700 ADSL Router Remote Command Injection Vulnerability
DrayTek Vigor 2700 ADSL Router is prone to a remote command-injection vulnerability.
Successfully exploiting this issue may allow an attacker to execute arbitrary commands in the context of the affected device.
DrayTek Vigor 2700 ADSL Router running firmware 2.8.3 is vulnerable; other versions may also be affected.
DrayTek Vigor 2700 ADSL Router is prone to a remote command-injection vulnerability.
Successfully exploiting this issue may allow an attacker to execute arbitrary commands in the context of the affected device.
DrayTek Vigor 2700 ADSL Router running firmware 2.8.3 is vulnerable; other versions may also be affected.
Exploit / POC
DrayTek Vigor 2700 ADSL Router Remote Command Injection Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
DrayTek Vigor 2700 ADSL Router Remote Command Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
DrayTek Vigor 2700 ADSL Router Remote Command Injection Vulnerability
References:
References: