CVE-2022-32548 Memory corruption in n/a
A buffer overflow in DrayTek Vigor routers allows attackers to execute arbitrary code or cause denial of service via crafted login credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-32548?
CVE-2022-32548 is a critical memory corruption vulnerability in Draytek Vigor3910 Firmware, published on 29 Aug 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
Weakness: CWE-120
Which versions are affected by CVE-2022-32548?
It affects 68 products.
Products include Draytek Vigor1000b Firmware, Draytek Vigor165 Firmware, Draytek Vigor166 Firmware, Draytek Vigor2133 Firmware, Draytek Vigor2133ac Firmware, Draytek Vigor2133fvac Firmware and 62 more.
How do I fix CVE-2022-32548?
No fix has been published for CVE-2022-32548 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-32548 being exploited?
There is no known exploitation of CVE-2022-32548 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Draytek Vigor3910 Firmware
Sources
Also known as GHSA-r59x-897w-8h5j.