CyberRota Analysis
AI-GeneratedMultiple models of DrayTek VigorSwitch are vulnerable due to missing authorization checks in their syslog functions, allowing remote attackers to execute unauthorized operations such as modifying configurations, restarting services, saving startup configurations, or clearing logs. The critical severity of this vulnerability (CVSS 9.1) necessitates immediate attention from organizations using affected VigorSwitch models to mitigate potential exploitation. Network administrators and security teams should prioritize patching or implementing workarounds to safeguard their systems from potential attacks.
Original NVD Description
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save startup configuration, or clear logs.