DrayTek Vigorap 918r Firmware vulnerabilities

2 CVEs affecting DrayTek Vigorap 918r Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-33778, published 2023-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-33778, published 2023-06-01. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were…
CVE-2020-28968, published 2021-10-22. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary…