VigorAP 918R vulnerabilities
11 known vulnerabilities in VigorAP 918R from DrayTek. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content after START_SPEED_TEST before command execution. A remote attacker can trigger th
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigge
- 7.2 High severity
VigorAP 918R: Buffer Copy without Checking Size of Input
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability vi
- 7.2 High severity
VigorAP 918R: Buffer Copy without Checking Size of Input
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can tri
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of the CMD0, CMD3, and CMD6 fields before command execution. A remote attacker can trigger this vulnera
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field before command execution. A remote attacker can trigger this vulnerability via crafte
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function. The vulnerability is caused by insufficient sanitization of the meshdevice_index and meshdevice_ip fields before command execution. A remote attack
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger this vulnerability via
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerabili
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can tr
- 7.2 High severity
VigorAP 918R: Improper Neutralization of Special Elements used in an OS Command
Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the event_code field is concatenated into a system command. A remote