Known Vulnerabilities for Vigor2960 by Draytek
Listed below are 10 of the newest known vulnerabilities associated with "Vigor2960" by "Draytek".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Draytek Vigor2960
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-24229 json | DrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the mainfunction.cgi component. | 7.8 - HIGH | 2023-03-15 | 2023-11-22 |
| CVE-2023-6265 json | DrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the mainfunction.cgi component. | 8.1 - HIGH | 2023-11-22 | 2023-11-30 |
| CVE-2023-1009 json | A vulnerability classified as problematic has been found in DrayTek Vigor 2960 1.5.1.4. Affected is the function sub_1DF14 of... | 5.5 - MEDIUM | 2023-02-24 | 2023-11-22 |
| CVE-2021-43118 json | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor ... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-05 |
| CVE-2021-42911 json | A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B ... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-05 |
| CVE-2020-19664 json | DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi. | 8.8 - HIGH | 2020-12-31 | 2023-11-07 |
| CVE-2020-15415 json | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote comm... | 9.8 - CRITICAL | 2020-06-30 | 2020-07-02 |
| CVE-2020-14993 json | A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers t... | 9.8 - CRITICAL | 2020-06-23 | 2023-11-07 |
| CVE-2020-14473 json | Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1. | 9.8 - CRITICAL | 2020-06-24 | 2023-11-07 |
| CVE-2020-14472 json | On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in t... | 9.8 - CRITICAL | 2020-06-24 | 2021-12-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Draytek | Vigor2960 | - |