Security Advisory

CVE-2020-14993

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-23 11:50:58
Last updated 2024-08-04 13:00:52
Assigner mitre
State PUBLISHED

Description

A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi.