CVE-2023-47254

Summary

CVE-2023-47254 is a critical vulnerability affecting the CLI interface of DrayTek Vigor167 version 5.2.2. This issue permits remote attackers to execute arbitrary OS commands by injecting them into the interface. The impact of this vulnerability is significant, as it enables attackers to escalate privileges, potentially gaining full control over the affected system. Any account created through the web interface could be exploited to carry out these attacks. Organizations using this version of DrayTek Vigor167 are strongly advised to upgrade to a patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.