GHSA-x2c7-pf46-x3p9HighCVSS 9.1
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple...
🔗 CVE IDs covered (1)
📋 Description
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.
🔗 References (4)
- https://nvd.nist.gov/vuln/detail/CVE-2026-71933
- https://www.draytek.com/about/security-advisory/multiple-vulnerabilities-in-vigorswitch-series-august-2026
- https://www.vulncheck.com/advisories/draytek-vigorswitch-multiple-models-missing-authorization-in-syslog-functions
- https://github.com/advisories/GHSA-x2c7-pf46-x3p9