Skip to content
Fencer Vulns
medium 6.1

CVE-2023-23313 json

Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's w…

published 2023-03-03 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-27413

cvss
6.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 29%
public exploits
0
none known

Summary

Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766, Vigor2135 v4.4.2.0; Vigor2763 v4.4.2.1; Vigor2862 and Vigor2926 v3.9.9.0; Vigor2925 v3.9.3; Vigor2952 and Vigor3220 v3.9.7.3; Vigor2133 and Vigor2762 v3.9.6.4; and Vigor2832 v3.9.6.2.

Patch / fix

  • draytek vigor2860_firmware 3.9.4
  • draytek vigor2860n_firmware 3.9.4
  • draytek vigor2860n-plus_firmware 3.9.4
  • draytek vigor2860vn-plus_firmware 3.9.4
  • draytek vigor2860ac_firmware 3.9.4
  • draytek vigor2860vac_firmware 3.9.4
  • draytek vigor2860l_firmware 3.9.4
  • draytek vigor2860ln_firmware 3.9.4
  • draytek vigor2832_firmware 3.9.6.3
  • draytek vigor2832n_firmware 3.9.6.3
  • draytek vigor2766_firmware 4.4.2.1
  • draytek vigor2766ax_firmware 4.4.2.1
  • draytek vigor2766ac_firmware 4.4.2.1
  • draytek vigor2766vac_firmware 4.4.2.1
  • draytek vigor2765_firmware 4.4.2.1
  • draytek vigor2765ax_firmware 4.4.2.1
  • draytek vigor2765ac_firmware 4.4.2.1
  • draytek vigor2765va_firmware 4.4.2.1
  • draytek vigor2763_firmware 4.4.2.2
  • draytek vigor2763ac_firmware 4.4.2.2

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
20 mo ago

Exploit prediction

0.36% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD 3.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CNA 3.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.