Vulnerabilities > Draytek > Vigorap 910C Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2020-04-15 CVE-2020-3932 Unspecified vulnerability in Draytek Vigorap 910C Firmware 1.3.1
A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage.
network
low complexity
draytek
7.5
2018-03-07 CVE-2017-11649 Cross-Site Request Forgery (CSRF) vulnerability in Draytek Vigorap 910C Firmware 1.2.0
Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp.
network
low complexity
draytek CWE-352
8.8