From f1d6a6d901c6942ce0e890ab9e528c3f7940701b Mon Sep 17 00:00:00 2001 From: CVE Team Date: Tue, 23 Jun 2020 12:01:17 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2020/10xxx/CVE-2020-10823.json | 5 +++ 2020/10xxx/CVE-2020-10824.json | 5 +++ 2020/10xxx/CVE-2020-10825.json | 5 +++ 2020/10xxx/CVE-2020-10826.json | 5 +++ 2020/10xxx/CVE-2020-10827.json | 5 +++ 2020/10xxx/CVE-2020-10828.json | 5 +++ 2020/14xxx/CVE-2020-14993.json | 67 ++++++++++++++++++++++++++++++++++ 7 files changed, 97 insertions(+) create mode 100644 2020/14xxx/CVE-2020-14993.json diff --git a/2020/10xxx/CVE-2020-10823.json b/2020/10xxx/CVE-2020-10823.json index eedef854375..7b480f0a39a 100644 --- a/2020/10xxx/CVE-2020-10823.json +++ b/2020/10xxx/CVE-2020-10823.json @@ -56,6 +56,11 @@ "refsource": "MISC", "name": "https://slashd.ga/2020/03/draytek-vulnerabilities/", "url": "https://slashd.ga/2020/03/draytek-vulnerabilities/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/", + "url": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/" } ] } diff --git a/2020/10xxx/CVE-2020-10824.json b/2020/10xxx/CVE-2020-10824.json index 5f4b8c1ff14..bb96fdb8512 100644 --- a/2020/10xxx/CVE-2020-10824.json +++ b/2020/10xxx/CVE-2020-10824.json @@ -56,6 +56,11 @@ "refsource": "MISC", "name": "https://slashd.ga/2020/03/draytek-vulnerabilities/", "url": "https://slashd.ga/2020/03/draytek-vulnerabilities/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/", + "url": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/" } ] } diff --git a/2020/10xxx/CVE-2020-10825.json b/2020/10xxx/CVE-2020-10825.json index 37121df5846..ca7919d167f 100644 --- a/2020/10xxx/CVE-2020-10825.json +++ b/2020/10xxx/CVE-2020-10825.json @@ -56,6 +56,11 @@ "refsource": "MISC", "name": "https://slashd.ga/2020/03/draytek-vulnerabilities/", "url": "https://slashd.ga/2020/03/draytek-vulnerabilities/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/", + "url": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/" } ] } diff --git a/2020/10xxx/CVE-2020-10826.json b/2020/10xxx/CVE-2020-10826.json index 1ee30dc66e9..0280678f634 100644 --- a/2020/10xxx/CVE-2020-10826.json +++ b/2020/10xxx/CVE-2020-10826.json @@ -56,6 +56,11 @@ "refsource": "MISC", "name": "https://slashd.ga/2020/03/draytek-vulnerabilities/", "url": "https://slashd.ga/2020/03/draytek-vulnerabilities/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/", + "url": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/" } ] } diff --git a/2020/10xxx/CVE-2020-10827.json b/2020/10xxx/CVE-2020-10827.json index cb8478848fe..1134dd07ace 100644 --- a/2020/10xxx/CVE-2020-10827.json +++ b/2020/10xxx/CVE-2020-10827.json @@ -56,6 +56,11 @@ "refsource": "MISC", "name": "https://slashd.ga/2020/03/draytek-vulnerabilities/", "url": "https://slashd.ga/2020/03/draytek-vulnerabilities/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/", + "url": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/" } ] } diff --git a/2020/10xxx/CVE-2020-10828.json b/2020/10xxx/CVE-2020-10828.json index 830a29cdbd2..f267942f24a 100644 --- a/2020/10xxx/CVE-2020-10828.json +++ b/2020/10xxx/CVE-2020-10828.json @@ -56,6 +56,11 @@ "refsource": "MISC", "name": "https://slashd.ga/2020/03/draytek-vulnerabilities/", "url": "https://slashd.ga/2020/03/draytek-vulnerabilities/" + }, + { + "refsource": "CONFIRM", + "name": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/", + "url": "https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/" } ] } diff --git a/2020/14xxx/CVE-2020-14993.json b/2020/14xxx/CVE-2020-14993.json new file mode 100644 index 00000000000..323e58f6666 --- /dev/null +++ b/2020/14xxx/CVE-2020-14993.json @@ -0,0 +1,67 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2020-14993", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "url": "https://github.com/dexterone/Vigor-poc", + "refsource": "MISC", + "name": "https://github.com/dexterone/Vigor-poc" + }, + { + "url": "https://www.draytek.com/about/security-advisory", + "refsource": "MISC", + "name": "https://www.draytek.com/about/security-advisory" + } + ] + } +} \ No newline at end of file