Vulnerabilities > Draytek > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-06-24 | CVE-2020-14472 | Command Injection vulnerability in Draytek products On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file. | 7.5 |
| 2020-03-26 | CVE-2020-10828 | Out-of-bounds Write vulnerability in Draytek products A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request. | 7.5 |
| 2020-03-26 | CVE-2020-10827 | Out-of-bounds Write vulnerability in Draytek products A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request. | 7.5 |
| 2020-03-26 | CVE-2020-10825 | Out-of-bounds Write vulnerability in Draytek products A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 3 of 3). | 7.5 |
| 2020-03-26 | CVE-2020-10824 | Out-of-bounds Write vulnerability in Draytek products A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 2 of 3). | 7.5 |
| 2020-03-26 | CVE-2020-10823 | Out-of-bounds Write vulnerability in Draytek products A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request (issue 1 of 3). | 7.5 |