Unscored CVE-2020-14993 EUVD-2020-7123GHSA-56hp-cj87-42wh

A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbi…

Published Jun 23, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi.

References

https://github.com/dexterone/Vigor-poc
https://www.draytek.com/about/security-advisory
https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability-%28cve-2020-14473%29