Login Request a demo
VF
Product
Vigor2927 Firmware
by Draytek · last CVE Feb 27, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 4Medium 1Low 0
Severity
All severities8Critical3High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Vigor2927 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51139
9.8
1%
Feb 27
Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and…
Affected: before 4.4.5.8
CVE-2024-51138
9.8
1%
Feb 27
Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier;…
Affected: before 4.4.5.8
CVE-2022-32548
9.8
34%
Aug 29
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1
Affected: before 4.4.0
CVE-2024-41339
8.8
1%
Feb 27
An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7,…
Affected: before 4.4.5.3
CVE-2024-41334
8.8
0%
Feb 27
Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior…
Affected: before 4.4.5.3
CVE-2024-41340
8.4
0%
Feb 27
An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor…
Affected: before 4.4.5.3
CVE-2024-41338
7.5
0%
Feb 27
A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to…
Affected: before 4.4.5.3
CVE-2023-23313
6.1
0%
Mar 3
Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal
Affected: before 4.4.2.3
Showing 8