Skip to content

Known vulnerabilities in DrayTek vigor3900_firmware

Is your version affected?

CVE Summary Score Published
CVE-2024-51304 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024
CVE-2024-51301 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024
CVE-2024-51300 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024
CVE-2024-51299 In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary… 8.8 High Oct 30, 2024
CVE-2024-48153 DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary… 9.8 Critical Oct 14, 2024
CVE-2024-46316 DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at… 8.0 High Oct 9, 2024
CVE-2024-44845 DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value… 8.0 High Sep 6, 2024
CVE-2024-44844 DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name… 8.0 High Sep 6, 2024
CVE-2024-43027 DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before… 8.0 High Aug 21, 2024
CVE-2020-15415 Exploited DrayTek Multiple Vigor Routers OS Command Injection Vulnerability 9.8 Critical Jun 30, 2020

Other DrayTek products