VI
Product
Vigor2960
On CISA KEVExploited in the wild
30
CVEs
3
On KEV
9.9
Max CVSS
9
New 30D
Severity mix
Critical 18High 10Medium 2Low 0
Watch
Add Vigor2960 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-19664 | 8.8 | Dec 31 | DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi Affected: through 1.5.1 |
| CVE-2023-6265 | 8.1 | Nov 22 | ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an… Affected: 1.5.1.4; 1.5.1.5 |
| CVE-2024-48074 | 8.0 | Oct 28 | An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE… Affected: 1.4.4 |
| CVE-2024-43027 | 8.0 | Aug 21 | DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection… Affected: before 1.5.1.5 |
| CVE-2023-24229 | 7.8 | Mar 15 | DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi… Affected: 1.5.1.4 |
| CVE-2026-113397 | 7.4 | Oct 20 | DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection Affected: 1.5.1.6 Revision 8218 |
| CVE-2026-113396 | 7.4 | Oct 20 | DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection Affected: 1.5.1.6 Revision 8218 |
| CVE-2026-113395 | 7.4 | Oct 20 | DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal Affected: 1.5.1.6 Revision 8218 |
| CVE-2026-113394 | 7.4 | Oct 20 | DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal Affected: 1.5.1.6 Revision 8218 |
| CVE-2026-113392 | 7.4 | Oct 20 | DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal Affected: 1.5.1.6 Revision 8218 |
Showing 10