Skip to contentDraytek Vigor2962 Firmware vulnerabilities
- draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 moreBuffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8...CVE-2024-511399.8 Critical
- draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 moreVigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and...CVE-2024-511389.8 Critical
- draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 moreAn issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8,...CVE-2024-413408.4 High
- draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 moreAn issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior...CVE-2024-413398.8 High
- draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 moreA NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200...CVE-2024-413387.5 High
- draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 moreDraytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860...CVE-2024-413348.8 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreBuffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor...CVE-2024-415968.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreAn issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive...CVE-2024-415947.5 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreDrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via...CVE-2024-415939.8 Critical
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreDrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query...CVE-2024-415928.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreDrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.CVE-2024-415916.1 Medium
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreSeveral CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of...CVE-2024-415908.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreThe CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are...CVE-2024-415888.0 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreStored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting...CVE-2024-415875.4 Medium
- draytek myvigor, vigor1000b firmware, vigor130 firmware +69 more +71 moreDraytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below...CVE-2023-337789.8 Critical
- draytek vigor1000b firmware, vigor130 firmware, vigor165 firmware +88 more +90 moreCertain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script...CVE-2023-233136.1 Medium
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +65 more +67 moreAn issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910...CVE-2022-32548Public exploitEPSS 34.0%10.0 Critical