DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 3.9.10, 2.10.6, 2.10.7, 3.10.6, 2.9.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to access arbitrary files on the device. Exploitation requires valid administrative credentials for the device's web management interface.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- DrayTek Corporation VigorSwitch G2540xs
fixed in 3.9.10
- DrayTek Corporation VigorSwitch P2540xs
fixed in 3.9.10
- DrayTek Corporation VigorSwitch FX2120
fixed in 3.9.10
- DrayTek Corporation VigorSwitch G2282x
fixed in 2.10.6
- DrayTek Corporation VigorSwitch P2282x
fixed in 2.10.6
- DrayTek Corporation VigorSwitch Q2300x
fixed in 2.10.7
- DrayTek Corporation VigorSwitch PQ2300xb
fixed in 2.10.7
- DrayTek Corporation VigorSwitch G2542x
fixed in 3.10.6
- DrayTek Corporation VigorSwitch P2542x
fixed in 3.10.6
- DrayTek Corporation VigorSwitch P2542xh
fixed in 3.10.6
- DrayTek Corporation VigorSwitch PX2060
fixed in 2.9.10
- DrayTek Corporation VigorSwitch G1280
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P1280
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P1281x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch G1282
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P1282
fixed in 2.9.10
- DrayTek Corporation VigorSwitch G2121
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P2121
fixed in 2.9.10
- DrayTek Corporation VigorSwitch PQ2121x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch Q2121x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch G2280x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P2280x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch Q2200x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch PQ2200xb
fixed in 2.9.10
- DrayTek Corporation VigorSwitch G2100
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P2100
fixed in 2.9.10
- DrayTek Corporation VigorSwitch G2540x
fixed in 2.9.10
- DrayTek Corporation VigorSwitch P2540x
fixed in 2.9.10