Is CVE-2022-32548 actively exploited?

CVE-2022-32548 has no public evidence of in-the-wild exploitation as of 2024-11-21.

What is the CVSS score for CVE-2022-32548?

CVE-2022-32548 has a CVSS score of 10 (CRITICAL severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

How do I patch CVE-2022-32548?

Patch guidance is available from draytek security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2022-32548.

Fix CVE-2022-32548 - CRITICAL draytek vigor3910 firmware

Q: Which products are affected by CVE-2022-32548?

68 products: draytek vigor3910 firmware, draytek vigor1000b firmware, draytek vigor2962 firmware, draytek vigor2962p firmware, draytek vigor2927 firmware, and 63 more.

Description

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-120

Metadata

Primary Vendor: DRAYTEK
Published: 8/29/2022
Last Modified: 11/21/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

draytek : vigor3910_firmwaredraytek : vigor1000b_firmwaredraytek : vigor2962_firmwaredraytek : vigor2962p_firmwaredraytek : vigor2927_firmwaredraytek : vigor2927ax_firmwaredraytek : vigor2927ac_firmwaredraytek : vigor2927vac_firmwaredraytek : vigor2927l_firmwaredraytek : vigor2927lac_firmwaredraytek : vigor2915_firmwaredraytek : vigor2915ac_firmwaredraytek : vigor2952_firmwaredraytek : vigor2952p_firmwaredraytek : vigor3220_firmwaredraytek : vigor2926_firmwaredraytek : vigor2926n_firmwaredraytek : vigor2926ac_firmwaredraytek : vigor2926vac_firmwaredraytek : vigor2926l_firmwaredraytek : vigor2926ln_firmwaredraytek : vigor2926lac_firmwaredraytek : vigor2862_firmwaredraytek : vigor2862n_firmwaredraytek : vigor2862ac_firmwaredraytek : vigor2862vac_firmwaredraytek : vigor2862b_firmwaredraytek : vigor2862bn_firmwaredraytek : vigor2862l_firmwaredraytek : vigor2862ln_firmwaredraytek : vigor2862lac_firmwaredraytek : vigor2620l_firmwaredraytek : vigor2620ln_firmwaredraytek : vigorlte_200n_firmwaredraytek : vigor2133_firmwaredraytek : vigor2133n_firmwaredraytek : vigor2133ac_firmwaredraytek : vigor2133vac_firmwaredraytek : vigor2133fvac_firmwaredraytek : vigor2762_firmwaredraytek : vigor2762n_firmwaredraytek : vigor2762ac_firmwaredraytek : vigor2762vac_firmwaredraytek : vigor165_firmwaredraytek : vigor166_firmwaredraytek : vigor2135_firmwaredraytek : vigor2135ac_firmwaredraytek : vigor2135vac_firmwaredraytek : vigor2135fvac_firmwaredraytek : vigor2765_firmwaredraytek : vigor2765ac_firmwaredraytek : vigor2765vac_firmwaredraytek : vigor2766_firmwaredraytek : vigor2766ac_firmwaredraytek : vigor2766vac_firmwaredraytek : vigor2832_firmwaredraytek : vigor2865_firmwaredraytek : vigor2865ax_firmwaredraytek : vigor2865ac_firmwaredraytek : vigor2865vac_firmwaredraytek : vigor2865l_firmwaredraytek : vigor2865lac_firmwaredraytek : vigor2866_firmwaredraytek : vigor2866ax_firmwaredraytek : vigor2866ac_firmwaredraytek : vigor2866vac_firmwaredraytek : vigor2866l_firmwaredraytek : vigor2866lac_firmware

Remediation Guidance

Executive Summary

View on NIST NVD