← Back to browse · API

CVE-2020-10823

Severity
CRITICAL
CVSS
9.8
EPSS
0.04425
Risk score
40.75
CISA KEV
No
PoC
No
Published
2020-03-26
Modified
2025-05-05
First seen
2026-08-07
Aliases
EUVD-2020-3229, GHSA-J52P-3WC7-GVWR
Products
n/a:n/a n/a
Sources
euvd EUVD-2020-3229

Description

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 1 of 3).

References