1. Home
  2. CVE Database
  3. CVE-2013-5703
MEDIUM · 6.8

CVE-2013-5703

The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during ins...

Vulnerability Description

The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js.

CVSS Score

6.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
DraytekVigor 2700 Router Firmware2.8.3
DraytekVigor 2700 Router-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2013-5703?

CVE-2013-5703 is a vulnerability with a CVSS score of 6.8 (MEDIUM). The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during ins...

How severe is CVE-2013-5703?

CVE-2013-5703 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-5703?

Check the references section above for vendor advisories and patch information. Affected products include: Draytek Vigor 2700 Router Firmware, Draytek Vigor 2700 Router.