CVE-2023-31447: DrayTek VIGOR2620 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to send a crafted payload to modify the content of the code segment, insert shellcode, and execute arbitrary code.

Affected products

• DrayTek VIGOR2620 Firmware: before 3.9.8.4 (fixed in 3.9.8.4)
• DrayTek VIGOR2625 Firmware: any version

Published 2023-08-21. Last modified 2026-06-17.