Security Advisory

CVE-2020-10825

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-26 16:04:57
Last updated 2025-05-05 17:08:58
Assigner mitre
State PUBLISHED

Description

A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 3 of 3).