Draytek
Page 2 of 2 — Draytek CVEs from a corpus of 135, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33778 | Critical | 9.8 | 2023-06-01 | Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor fi… |
CVE-2023-24229 | High | 7.8 | 2023-03-15 | DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mai… |
CVE-2023-23313 | Medium | 6.1 | 2023-03-03 | Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application manag… |
CVE-2023-1163 | Medium | 6.5 | 2023-03-03 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability… |
CVE-2023-1162 | High | 7.2 | 2023-03-03 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown func… |
CVE-2023-1009 | Medium | 6.5 | 2023-02-24 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub_1DF14… |
CVE-2022-32548 | Critical | 10.0 | 2022-08-29 | An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via t… |
CVE-2021-43118 | Critical | 9.8 | 2022-03-29 | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP me… |
CVE-2021-42911 | Critical | 9.8 | 2022-03-29 | A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B <= 1.5.1.3 in the mainfunction.cgi… |
CVE-2020-28968 | Medium | 5.4 | 2021-10-22 | Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability… |
CVE-2021-20129 | High | 7.5 | 2021-10-13 | An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs. |
CVE-2021-20128 | Medium | 5.4 | 2021-10-13 | The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not pr… |
CVE-2021-20127 | High | 8.1 | 2021-10-13 | An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an… |
CVE-2021-20126 | High | 8.8 | 2021-10-13 | Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request wa… |
CVE-2021-20125 | Critical | 9.8 | 2021-10-13 | An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3… |
CVE-2021-20124 | High | 7.5 | 2021-10-13 | A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated… |
CVE-2021-20123 | High | 7.5 | 2021-10-13 | A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthe… |
CVE-2020-19664 | High | 8.8 | 2020-12-31 | DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi. |
CVE-2020-15415 | Critical | 9.8 | 2020-06-30 | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharac… |
CVE-2020-14473 | Critical | 9.8 | 2020-06-24 | Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1. |
CVE-2020-14472 | Critical | 9.8 | 2020-06-24 | On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file. |
CVE-2020-14993 | Critical | 9.8 | 2020-06-23 | A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the f… |
CVE-2020-3932 | High | 7.5 | 2020-04-15 | A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage. |
CVE-2020-10828 | Critical | 9.8 | 2020-03-26 | A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via… |
CVE-2020-10827 | Critical | 9.8 | 2020-03-26 | A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via… |
CVE-2020-10826 | Critical | 9.8 | 2020-03-26 | /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTT… |
CVE-2020-10825 | Critical | 9.8 | 2020-03-26 | A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5… |
CVE-2020-10824 | Critical | 9.8 | 2020-03-26 | A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remo… |
CVE-2020-10823 | Critical | 9.8 | 2020-03-26 | A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote… |
CVE-2020-8515 | Critical | 9.8 | 2020-02-01 | DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without… |
CVE-2019-16534 | Medium | 6.1 | 2019-09-20 | On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product. |
CVE-2019-16533 | Medium | 6.1 | 2019-09-20 | On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-li… |
CVE-2017-11650 | Medium | 6.1 | 2018-03-07 | Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web sc… |
CVE-2017-11649 | High | 8.8 | 2018-03-07 | Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authe… |
CVE-2013-5703 | | 2013-10-22 | The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID valu… |