CVE-2019-16533

On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS

published September 20, 2019

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Published
2019-09-20T15:22Z
EPSS history
Timeline
  • 20 SEP 15:22Z
    On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS
    cvelistv5