Product by DrayTek

Vigor2960 Firmware

21 known vulnerabilities in Vigor2960 Firmware (DrayTek), 3 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Vigor2960 Firmware (DrayTek)

Critical	CVE-2020-8515	Multiple DrayTek Vigor Routers Web Management Page Vulnerability In CISA KEValso in 2 other products	9.8	01.02.2020
Critical	CVE-2020-15415	DrayTek Multiple Vigor Routers OS Command Injection Vulnerability In CISA KEValso in 2 other products	9.8	30.06.2020
Critical	CVE-2024-12987	DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection In CISA KEValso in 2 other products	7.3	27.12.2024
Critical	CVE-2021-43118	DrayTek Vigor2960 Firmware: Command Injection also in 2 other products	9.8	29.03.2022
Critical	CVE-2020-10826	DrayTek Vigor2960 Firmware: Command Injection also in 2 other products	9.8	26.03.2020
Critical	CVE-2020-10828	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	26.03.2020
Critical	CVE-2020-10827	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	26.03.2020
Critical	CVE-2024-12986	DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection also in 2 other products	7.3	27.12.2024
Critical	CVE-2020-14993	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	23.06.2020
Critical	CVE-2020-10823	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	26.03.2020
Critical	CVE-2020-10824	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	26.03.2020
Critical	CVE-2020-10825	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	26.03.2020
Critical	CVE-2021-42911	DrayTek Vigor2960 Firmware: Format String also in 2 other products	9.8	29.03.2022
High	CVE-2020-19664	DrayTek Vigor2960 Firmware: security vulnerability	8.8	31.12.2020
High	CVE-2023-24229	DrayTek Vigor2960 Firmware: security vulnerability	7.8	15.03.2023
Medium	CVE-2023-1009	DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal also in 1 other product	6.5	24.02.2023
Critical	CVE-2020-14472	DrayTek Vigor2960 Firmware: security vulnerability also in 2 other products	9.8	24.06.2020
Critical	CVE-2020-14473	DrayTek Vigor2960 Firmware: Stack-Based Buffer Overflow also in 2 other products	9.8	24.06.2020
High	CVE-2023-6265	DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal also in 1 other product	6.5	22.11.2023
High	CVE-2024-43027	DrayTek Vigor2960 Firmware: Command Injection also in 2 other products	8.0	21.08.2024
High	CVE-2024-48074	DrayTek Vigor2960 Firmware: Remote Code Execution	8.0	28.10.2024

All products by DrayTek

Key figures

Vulnerabilities