Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and earlier; Vigor3910 4.4.3.1 and earlier a stack-based buffer overflow vulnerability has been identified in the URL parsing functionality of the TR069 STUN server. This flaw occurs due to insufficient bounds checking on the amount of URL parameters, allowing an attacker to exploit the overflow by sending a maliciously crafted request. Consequently, a remote attacker can execute arbitrary code with elevated privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DrayTek Vigor 165 安全漏洞
Vulnerability Description
DrayTek Vigor 165是中国居易（DrayTek）公司的一款 VDSL2 35b 超矢量调制解调器/路由器。 DrayTek Vigor 165存在安全漏洞，该漏洞源于URL解析功能存在栈缓冲区溢出，允许远程攻击者执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A