Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-15	CVE-2020-3932	Information Exposure vulnerability in Draytek Vigorap 910C Firmware 1.3.1 A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage. network low complexity draytek CWE-200	5.0
2018-03-07	CVE-2017-11650	Cross-site Scripting vulnerability in Draytek Vigorap 910C Firmware 1.2.0 Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp. network draytek CWE-79	4.3
2018-03-07	CVE-2017-11649	Cross-Site Request Forgery (CSRF) vulnerability in Draytek Vigorap 910C Firmware 1.2.0 Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp. network draytek CWE-352	6.8