Skip to content
OpenAdvisories

Vendor

DrayTek

59 known vulnerabilities.

Products

VigorSwitch G2540xs 29 VigorSwitch P2540xs 29 VigorSwitch FX2120 29 VigorSwitch G2282x 29 VigorSwitch P2282x 29 VigorSwitch Q2300x 29 VigorSwitch PQ2300xb 29 VigorSwitch G2542x 29 VigorSwitch P2542x 29 VigorSwitch P2542xh 29 VigorSwitch PX2060 29 VigorSwitch G1280 29 VigorSwitch P1280 29 VigorSwitch P1281x 29 VigorSwitch G1282 29 VigorSwitch P1282 29 VigorSwitch G2121 29 VigorSwitch P2121 29 VigorSwitch PQ2121x 29 VigorSwitch Q2121x 29 VigorSwitch G2280x 29 VigorSwitch P2280x 29 VigorSwitch Q2200x 29 VigorSwitch PQ2200xb 29 VigorSwitch G2100 29 VigorSwitch P2100 29 VigorSwitch G2540x 29 VigorSwitch P2540x 29 Vigor2960 12 VigorAP 918R 11 VigorAP 960C 11 VigorAP 1060C 11 VigorAP 906 11 VigorAP 912C 11 VigorAP 903 11 Vigor 2960 4 Vigor300B 2 Vigor 300B 1 Vigor1000B 1 Vigor2962 1
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • High 8.1
    CVE-2022-50994

    DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi

    DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to execute arbitrary commands by injecting shell metacharacters into the formpassword par…

    DrayTek Vigor 2960 Network devices
  • High 7.3
    CVE-2024-12987 Exploited Scanner template EPSS 98%

    DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

    A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argu…

    DrayTek Vigor2960 Vigor300B Network devices
    KEV May 15, 2025
  • High 7.3
    CVE-2024-12986 Public exploit EPSS 36%

    DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection

    A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The …

    DrayTek Vigor2960 Vigor300B Network devices
  • High 7.2
    CVE-2023-1162 EPSS 26%

    DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the…

    DrayTek Vigor 2960 Network devices
  • High 7.5
    CVE-2020-3932

    Draytek VigorAP910C - Information Leakage

    A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage.

    DrayTek VigorAP910C Network devices