CVE-2013-5703

Currently unrated

Key Information:

Vendor
Draytek
Status
Vigor 2700 Router Firmware
Vigor 2700 Router
Vendor
CVE Published:
22 October 2013

Summary

The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js.

References

http://www.kb.cert.org/vuls/id/101462
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.