Known Vulnerabilities for Vigor3900 Firmware by Draytek
Listed below are 10 of the newest known vulnerabilities associated with "Vigor3900 Firmware" by "Draytek".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-43118 | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor ... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-05 |
| CVE-2021-42911 | A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B ... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-05 |
| CVE-2020-14472 | On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in t... | 9.8 - CRITICAL | 2020-06-24 | 2021-12-21 |
| CVE-2020-10828 | A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attac... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-10827 | A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attac... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-10826 | /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve ... | 9.8 - CRITICAL | 2020-03-26 | 2022-04-22 |
| CVE-2020-10825 | A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-10824 | A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-10823 | A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B d... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-8515 | DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remo... | 9.8 - CRITICAL | 2020-02-01 | 2023-11-07 |