CVE-2023-6265
published 2023-11-22CVE-2023-6265: ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option'…
PriorityP351high8.1CVSS 3.1
AVNACLPRLUINSUCNIHAH
EPSS
1.80%
75.8th percentile
** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| draytek | vigor2960 | — | — |
| draytek | vigor2960 | — | — |
| draytek | vigor2960_firmware | — | — |
| draytek | vigor2960_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS Draytek mainfunction.cgi dumpSyslog option Arbitrary File Deletion Attempt (CVE-2023-6265)
suricata·2024-12-18·CVSS 6.5
CVE-2023-6265 [MEDIUM] ET WEB_SPECIFIC_APPS Draytek mainfunction.cgi dumpSyslog option Arbitrary File Deletion Attempt (CVE-2023-6265)
ET WEB_SPECIFIC_APPS Draytek mainfunction.cgi dumpSyslog option Arbitrary File Deletion Attempt (CVE-2023-6265)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Draytek mainfunction.cgi dumpSyslog option Arbitrary File Deletion Attempt (CVE-2023-6265)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:25; content:"/cgi-bin/mainfunction.cgi"; fast_pattern; http.request_body; content:"action|3d|dumpSyslog"; content:"option|3d|"; pcre:"/^[^\x26]*?(?:(?:\x2e|%2[Ee]){1,2}(?:\x2f|\x5c|%5[Cc]|%2[Ff]){1,}){1,}/R"; content:"rtick|3d|"; reference:cve,2023-6265; reference:url,github.com/xxy1126/Vuln/blob/main/Draytek/4.md; classtype:attempted-admin; sid:2058404; rev:1; metadata:affected_product DrayTek, attack_target Networking_Equipment, tls_state plainte
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/xxy1126/Vuln/blob/main/Draytek/4.mdhttps://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960https://www.draytek.com/products/vigor2960/https://github.com/xxy1126/Vuln/blob/main/Draytek/4.mdhttps://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960https://www.draytek.com/products/vigor2960/
2023-11-22
Published