CVE-2018-20872: I-Lan Draytekl Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649.

Affected products

• I-Lan Draytekl Firmware: before 2018-05-23 (fixed in 2018-05-23)

Published 2019-07-31. Last modified 2026-06-17.