Skip to content
OpenAdvisories

Product · DrayTek

Vigor 2960

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2022-50994

    DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi

    DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to execute arbitrary commands by injecting shell metacharacters into the formpassword par…

    DrayTek Vigor 2960 Network devices
  • High 7.2
    CVE-2023-1162 EPSS 26%

    DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the…

    DrayTek Vigor 2960 Network devices