CVE-2020-14472 - Vulnerability Details - OpenCVE

On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Draytek	Vigor2960 Vigor2960 Firmware Vigor300b Vigor300b Firmware Vigor3900 Vigor3900 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draytek:vigor300b:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draytek:vigor2960:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:draytek:vigor3900:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1
https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-06-24T16:51:23

Updated: 2024-08-04T12:46:34.614Z

Reserved: 2020-06-19T00:00:00

Link: CVE-2020-14472

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-06-24T17:15:11.790

Modified: 2024-11-21T05:03:20.673

Link: CVE-2020-14472

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2020-06-24T00:00:00", "descriptions": [{"lang": "en", "value": "On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-07-08T19:30:05", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240"}, {"tags": ["x_refsource_MISC"], "url": "https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-14472", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240", "refsource": "MISC", "url": "https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240"}, {"name": "https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1", "refsource": "MISC", "url": "https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T12:46:34.614Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-14472", "datePublished": "2020-06-24T16:51:23", "dateReserved": "2020-06-19T00:00:00", "dateUpdated": "2024-08-04T12:46:34.614Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "145682DB-5518-43FD-8419-E0232566F3C4", "versionEndExcluding": "1.5.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor300b:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA5B988D-ED1A-4CBF-8B34-C5B03A55ED52", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2AD4768B-73CE-4185-B676-71E1791F8D47", "versionEndExcluding": "1.5.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor2960:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FDA3905-67DD-4F31-AFCF-014F1D7CCC1F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C71C769-6CEB-4377-85FB-8719626D04B5", "versionEndExcluding": "1.5.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:draytek:vigor3900:-:*:*:*:*:*:*:*", "matchCriteriaId": "FEECFBBC-5551-4135-9194-4216A39B04B9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file."}, {"lang": "es", "value": "DrayTek Vigor3900, Vigor2960 y Vigor300B anteriores a 1.5.1.1, tiene algunas vulnerabilidades de inyecci\u00f3n de comandos en el archivo mainfunction.cgi."}], "id": "CVE-2020-14472", "lastModified": "2024-11-21T05:03:20.673", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-06-24T17:15:11.790", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}