A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 3 of 3).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-03-26T16:04:57
Updated: 2024-12-18T04:55:39.811Z
Reserved: 2020-03-22T00:00:00
Link: CVE-2020-10825
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-03-26T17:15:23.313
Modified: 2024-11-21T04:56:09.103
Link: CVE-2020-10825
Redhat
No data.