Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DrayTek Vigor2925 跨站脚本漏洞
Vulnerability Description
DrayTek Vigor2925是中国台湾居易科技（DrayTek）公司的一款无线防火墙路由器。 使用3.8.4.3版本固件的DrayTek Vigor2925中的loginset.htm页面存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
CVSS Information
N/A
Vulnerability Type
N/A