📦

vigor3900

Vendor: draytek

Login to add this product to WatchStack
Actively Exploited 2 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 41 Remote Access
Total CVEs 59 Total Indexed
Avg. EPSS 7.54% Exploit Prob.
Latest CVE CVE-2024-45893 Nov 04

Security Vulnerability Index

Page 4 / 6
9.8 CVSS
CVE-2024-48153
RCE

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_subconfig function.

EPSS: 0.68%
8.0 CVSS
CVE-2024-46316
RCE

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message.

EPSS: 1.12%
8.8 CVSS
CVE-2024-44845
RCE

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function.

EPSS: 1.96%
8.8 CVSS
CVE-2024-44844
RCE

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function.

EPSS: 1.90%
8.0 CVSS
CVE-2024-43027
RCE

DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.

EPSS: 1.30%
9.8 CVSS
CVE-2021-43118
RCE

A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary code.

EPSS: 34.85%
9.8 CVSS
CVE-2021-42911
RCE

A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B <= 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code.

EPSS: 3.30%
9.8 CVSS
CVE-2020-15415
RCE

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472.

EPSS: 84.60%
9.8 CVSS
CVE-2020-14473

Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1.

EPSS: 2.30%
9.8 CVSS
CVE-2020-14472
RCE

On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file.

EPSS: 2.93%