CVE-2022-32548

50

FAUCET Score

CVE-2022-32548 is a critical buffer overflow vulnerability affecting DrayTek Vigor routers, specifically versions before July 2022 (e.g., Vigor3910 before 4.3.1.1). This flaw allows unauthenticated attackers to achieve remote code execution by sending specially crafted usernames or passwords to the /cgi-bin/wlogin.cgi endpoint. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While there is no public exploit code (Metasploit, Nuclei, ExploitDB) or KEV listing, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 4.3.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor3910_firmware::::::::
		< 4.3.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor1000b_firmware::::::::
		< 4.3.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor2962_firmware::::::::
		< 4.3.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor2962p_firmware::::::::
		< 4.4.0CPE matchmatch criteria	cpe:2.3:o:draytek:vigor2927_firmware::::::::

CVSS Data

CVSS version used by this source: 3.1

10.0CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

6.0

CvssVersion

3.1

Exploit Intelligence

EPSS Score

33.79%

Probability of exploitation in next 30 days

EPSS Percentile

98.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.3379 is in the 95th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (7)

capnprotovendor investigatingvia llm_extracted

ciscovendor investigatingvia llm_extracted

hedgedocvendor investigatingvia llm_extracted

hpvendor investigatingvia llm_extracted

jenkinsvendor investigatingvia llm_extracted

lycheeorgvendor investigatingvia llm_extracted

yokogawavendor investigatingvia llm_extracted

Vendor Advisories (7)

yokogawallm-yokogawa-ba73911a743f08d8

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

lycheeorgllm-lycheeorg-78a99b73dfcf22bc

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

jenkinsllm-jenkins-0e2513d814a3e16e

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

hpllm-hp-9ef401a2711cbe06

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

hedgedocllm-hedgedoc-7ca4236f2382252d

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

capnprotollm-capnproto-2cbc131452e733e2

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

ciscollm-cisco-51b364d29c74e919

DrayTek Router unauthenticated remote code execution vulnerability (CVE-2022-32548)

References

securityweek.com / smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers

ExploitThird Party Advisory

trellix.com / en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html

ExploitThird Party Advisory