Heist/ feed

Security feed

advisoryCISA Known Exploited Vulnerabilities

Multiple DrayTek Vigor Routers Web Management Page Vulnerability

DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Multiple Vigor RoutersCVE-2020-8515
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-8515

Multiple Vigor Routers

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2020-8515

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#3546 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryCISA Known Exploited Vulnerabilities

DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Multiple Vigor RoutersCVE-2020-15415
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-15415

Multiple Vigor Routers

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2020-15415

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#1073 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement