Security Advisory
CVE-2017-11650
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp.