2 results · Clear filters · Feed
-
Medium 4.9
DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input conta…
-
Medium 4.9
DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout
Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vuln…