VULNERABILITY INTELLIGENCE

CVE-2023-47254

CVSS score9.8 CRITICAL
EPSS probability2.20%
CISA KEVNot currently listed
Published2023-12-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privileges via any account created within the web interface.

Weakness classification

  • nvd@nist.gov: CWE-78

Primary references