Draytek Corporation Vigorswitch P2542x
22 CVEs affecting Draytek Corporation Vigorswitch P2542x. Latest disclosed: 2026-08-24. Critical: 1, High: 20.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71933 | Critical | 9.1 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authori… |
CVE-2026-71943 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71942 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multip… |
CVE-2026-71941 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerability is caused by concatenating multiple… |
CVE-2026-71940 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying… |
CVE-2026-71939 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying t… |
CVE-2026-71938 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of t… |
CVE-2026-71937 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vulnerability is caused by repeated conca… |
CVE-2026-71936 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of s… |
CVE-2026-71935 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string con… |
CVE-2026-71934 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks whe… |
CVE-2026-71931 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerability is caused by insufficient filteri… |
CVE-2026-71930 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71929 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filterin… |
CVE-2026-71928 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71927 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71926 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitizati… |
CVE-2026-71925 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71924 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71923 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vulnerability is caused by insufficient filtering o… |