Known Vulnerabilities for Vigor3900 Firmware by Draytek
Listed below are 10 of the newest known vulnerabilities associated with "Vigor3900 Firmware" by "Draytek".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-43118 json | A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor ... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-05 |
| CVE-2021-42911 json | A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B ... | 9.8 - CRITICAL | 2022-03-29 | 2022-04-05 |
| CVE-2020-15415 json | On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote comm... | 9.8 - CRITICAL | 2020-06-30 | 2020-07-02 |
| CVE-2020-14993 json | A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers t... | 9.8 - CRITICAL | 2020-06-23 | 2023-11-07 |
| CVE-2020-14473 json | Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1. | 9.8 - CRITICAL | 2020-06-24 | 2023-11-07 |
| CVE-2020-14472 json | On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in t... | 9.8 - CRITICAL | 2020-06-24 | 2021-12-21 |
| CVE-2020-10828 json | A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attac... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-10827 json | A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attac... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |
| CVE-2020-10826 json | /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve ... | 9.8 - CRITICAL | 2020-03-26 | 2022-04-22 |
| CVE-2020-10825 json | A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960... | 9.8 - CRITICAL | 2020-03-26 | 2020-06-23 |