What’s Vulnerable › Vulnerabilities

CVE-2022-32548

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 34.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-29 · updated 2026-06-17
• Weakness: CWE-120

Description

An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

Affected products

• DrayTek Vigor1000B Firmware: before 4.3.1.1 — fixed in 4.3.1.1
• DrayTek Vigor165 Firmware: before 4.2.4 — fixed in 4.2.4
• DrayTek Vigor166 Firmware: before 4.2.4 — fixed in 4.2.4
• DrayTek Vigor2133 Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2133Ac Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2133Fvac Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2133N Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2133Vac Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2135 Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2135Ac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2135Fvac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2135Vac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2620L Firmware: before 3.9.8.1 — fixed in 3.9.8.1
• DrayTek Vigor2620Ln Firmware: before 3.9.8.1 — fixed in 3.9.8.1
• DrayTek Vigor2762 Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2762Ac Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2762N Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2762Vac Firmware: before 3.9.6.4 — fixed in 3.9.6.4
• DrayTek Vigor2765 Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2765Ac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2765Vac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2766 Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2766Ac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2766Vac Firmware: before 4.4.2 — fixed in 4.4.2
• DrayTek Vigor2832 Firmware: before 3.9.6 — fixed in 3.9.6
• DrayTek Vigor2862 Firmware: before 3.9.8.1 — fixed in 3.9.8.1
• DrayTek Vigor2862Ac Firmware: before 3.9.8.1 — fixed in 3.9.8.1
• DrayTek Vigor2862B Firmware: before 3.9.8.1 — fixed in 3.9.8.1
• DrayTek Vigor2862Bn Firmware: before 3.9.8.1 — fixed in 3.9.8.1
• DrayTek Vigor2862L Firmware: before 3.9.8.1 — fixed in 3.9.8.1

How to fix

Upgrade to a fixed version: DrayTek Vigor1000B Firmware 4.3.1.1; DrayTek Vigor165 Firmware 4.2.4; DrayTek Vigor166 Firmware 4.2.4; DrayTek Vigor2133 Firmware 3.9.6.4; DrayTek Vigor2133Ac Firmware 3.9.6.4; DrayTek Vigor2133Fvac Firmware 3.9.6.4; DrayTek Vigor2133N Firmware 3.9.6.4; DrayTek Vigor2133Vac Firmware 3.9.6.4; DrayTek Vigor2135 Firmware 4.4.2; DrayTek Vigor2135Ac Firmware 4.4.2; DrayTek Vigor2135Fvac Firmware 4.4.2; DrayTek Vigor2135Vac Firmware 4.4.2. Check the vendor advisory for mitigations.

References

• https://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers
• https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html
• https://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers
• https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html

Get alerted when CVE-2022-32548 or the next vulnerability affects your stack