Skip to contentDraytek vulnerabilities
Products
Show 36 moreShow less
Newest
- draytek vigor3910 firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter...CVE-2024-465517.5 High
- draytek vigor3910 firmwareDraytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName...CVE-2024-465507.5 High
- draytek vigor3900 firmwareDrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection...CVE-2024-448458.8 High
- draytek vigor3900 firmwareDrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection...CVE-2024-448448.8 High
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreDrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek...CVE-2024-430278.0 High
- draytek vigor3910 firmwareA Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices....CVE-2024-237217.5 High
- draytek vigor167 firmwareAn OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote...CVE-2023-472549.8 Critical
- draytek vigor2960, vigor2960 firmware +1 moreDrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversalCVE-2023-62656.5 Medium
- draytek vigor2620, vigor2620 firmware, vigor2625 firmware +2 moreuser_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925...CVE-2023-314479.8 Critical
- draytek myvigor, vigor1000b firmware, vigor130 firmware +69 more +71 moreDraytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below...CVE-2023-337789.8 Critical
- draytek vigor2960 firmwareDrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the...CVE-2023-242297.8 High
- draytek vigor 2960, vigor 2960 firmware +1 moreDrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversalCVE-2023-11636.5 Medium
- draytek vigor 2960, vigor 2960 firmware +1 moreDrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injectionCVE-2023-1162EPSS 26.0%7.2 High
- draytek vigor1000b firmware, vigor130 firmware, vigor165 firmware +88 more +90 moreCertain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script...CVE-2023-233136.1 Medium
- draytek vigor 2960, vigor2960 firmware +1 moreDrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversalCVE-2023-1009EPSS 15.7%6.5 Medium
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +65 more +67 moreAn issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910...CVE-2022-32548Public exploitEPSS 34.0%10.0 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900...CVE-2021-43118EPSS 34.8%9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5...CVE-2021-429119.8 Critical
- draytek vigorap 1000c firmware, vigorap 700 firmware, vigorap 710 firmware +10 more +12 moreDraytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS...CVE-2020-289685.4 Medium
- draytek vigorconnectAn information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an...CVE-2021-201297.5 High
- draytek vigorconnectThe Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was...CVE-2021-201285.4 Medium
- draytek vigorconnectAn arbitrary file deletion vulnerability exists in the file delete functionality of the...CVE-2021-201278.1 High
- draytek vigorconnectDraytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not...CVE-2021-201268.8 High
- draytek vigorconnectAn arbitrary file upload and directory traversal vulnerability exists in the file upload...CVE-2021-201259.8 Critical
- draytek vigorconnectA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download...CVE-2021-20124In KEVEPSS 95.9%7.5 High
- draytek vigorconnectA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download...CVE-2021-20123In KEVEPSS 90.3%7.5 High
- draytek vigor2960 firmwareDrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA...CVE-2020-196648.8 High
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 moreOn DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi...CVE-2020-15415In KEVEPSS 84.5%9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreDrayTek Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1 is affected by a remote...CVE-2020-144729.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreStack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware...CVE-2020-144739.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1...CVE-2020-149939.8 Critical
- draytek corp. vigorap910c, draytek vigorap 910c firmware +1 moreDraytek VigorAP910C - Information LeakageCVE-2020-39327.5 High
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices...CVE-2020-10828EPSS 20.9%9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices...CVE-2020-10827EPSS 20.9%9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows...CVE-2020-10826EPSS 39.4%9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on...CVE-2020-108259.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek...CVE-2020-108249.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900...CVE-2020-108239.8 Critical
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 moreDrayTek Vigor2960 1.3.1_Beta; Vigor3900 1.4.4_Beta; and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1...CVE-2020-8515In KEVPublic exploitEPSS 100.0%9.8 Critical
- draytek vigor2925 firmwareOn DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the...CVE-2019-165346.1 Medium
- draytek vigor2925 firmwareOn DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset...CVE-2019-165336.1 Medium
- draytek vigorap 910c firmwareCross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3...CVE-2017-116506.1 Medium
- draytek vigorap 910c firmwareCross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2...CVE-2017-116498.8 High
- draytek vigor 2700 router, vigor 2700 router firmware +1 moreThe DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code,...CVE-2013-57036.8 Medium