CVE-2023-6265 DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal

What is CVE-2023-6265?

CVE-2023-6265 is a medium-severity path traversal vulnerability in DrayTek Vigor2960, published on 22 Nov 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.

Weakness: CWE-22

Which versions are affected by CVE-2023-6265?

It affects 1 product.

Products include Draytek Vigor2960 Firmware.

How do I fix CVE-2023-6265?

No fix has been published for CVE-2023-6265 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2023-6265 being exploited?

There is no known exploitation of CVE-2023-6265 in the wild and no public exploit code.

Other vulnerabilities in DrayTek Vigor2960

• CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Exploited Critical 9.8
• CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Exploited Critical 9.8
• CVE-2024-12987 DrayTek Vigor Routers OS Command Injection Exploited Medium 6.9
• CVE-2021-42911 Other in n/a Critical 9.8
• CVE-2021-43118 Command injection in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5gfv-6mr8-g7x2.