Skip to content
Draytek Vigor2866 Firmware vulnerabilities
-
draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 more
Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8...
CVE-2024-51139
9.8 Critical
-
draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 more
Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and...
CVE-2024-51138
9.8 Critical
-
draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more
An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8,...
CVE-2024-41340
8.4 High
-
draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more
An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior...
CVE-2024-41339
8.8 High
-
draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more
A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200...
CVE-2024-41338
7.5 High
-
draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860...
CVE-2024-41334
8.8 High
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor...
CVE-2024-41596
8.0 High
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive...
CVE-2024-41594
7.5 High
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via...
CVE-2024-41593
9.8 Critical
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query...
CVE-2024-41592
8.0 High
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.
CVE-2024-41591
6.1 Medium
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of...
CVE-2024-41590
8.0 High
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are...
CVE-2024-41588
8.0 High
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 more
Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting...
CVE-2024-41587
5.4 Medium
-
draytek vigor1000b firmware, vigor130 firmware, vigor165 firmware +88 more +90 more
Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script...
CVE-2023-23313
6.1 Medium
-
draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +65 more +67 more
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910...
CVE-2022-32548
Public exploit
EPSS 34.0%
10.0 Critical