Draytek VigorConnect 跨站请求伪造漏洞

VigorConnect is the native network management software for DrayTek devices.A cross-site request forgery vulnerability exists in Draytek VigorConnect version 1.6.0-B3. No details of the vulnerability are currently available...

Draytek VigorConnect 路径遍历漏洞

VigorConnect is the local network management software for DrayTek devices.A local file inclusion vulnerability exists in the file download function of the DownloadFileServlet endpoint of Draytek VigorConnect version 1.6.0-B3. An attacker could exploit this vulnerability to download arbitrary file...

Draytek VigorConnect 路径遍历漏洞

VigorConnect is the local network management software for DrayTek devices.A local file inclusion vulnerability exists in the file download functionality of the WebServlet endpoint of Draytek VigorConnect version 1.6.0-B3. An attacker could exploit this vulnerability to download arbitrary files fr...

CVE-2021-20124

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. Recent...

CVE-2021-20123

A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges...

Draytek VigorConnect 代码问题漏洞

VigorConnect is the local network management software for DrayTek devices.An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of the DownloadFileServlet in Draytek VigorConnect version 1.6.0-B3. An attacker could exploit the vulnerability to uplo...

Exploit for OS Command Injection in Draytek Vigor2960_Firmware

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about...

PT-2021-8120 · Draytek · Draytek Vigorconnect

Name of the Vulnerable Software and Affected Versions: Draytek VigorConnect version 1.6.0-B3 Description: A local file inclusion vulnerability exists in the file download functionality of the "DownloadFileServlet" endpoint. An unauthenticated attacker could leverage this vulnerability to download...

PT-2021-8205 · Draytek · Draytek Vigor300B +2

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 2960 version 1.5.1.3 DrayTek Vigor 3900 version 1.5.1.3 DrayTek Vigor 300B version 1.5.1.3 Description: A Remote Command Injection issue exists in the mainfunction.cgi script of the DrayTek Vigor web interface due to inadequate...

Weak password vulnerability in DrayTek Vigor2922

Vigor2922 is a high-performance Internet behavior management VPN router product for small and medium-sized businesses. DrayTek Vigor2922 suffers from a weak password vulnerability. Attackers use the weak password to log into the backend and obtain sensitive information...

Weak Password Vulnerability in DrayTek Vigor2912

The Vigor 2912 is a high-performance firewall router product for small and medium-sized businesses. A weak password vulnerability exists in DrayTek Vigor 2912. An attacker uses a weak password to log into the backend and obtain sensitive information...

Command Execution Vulnerability in DrayTek Vigor2960 (CNVD-2021-28718)

Vigor2960 is a load balancing router and VPN gateway appliance from DrayTek Taiwan, China. The DrayTek Vigor2960 suffers from a command execution vulnerability that can be exploited by an attacker to gain ROOT privileges...

Command Execution Vulnerability in DrayTek Vigor2960 (CNVD-2021-28719)

Vigor2960 is a load balancing router and VPN gateway appliance from DrayTek Taiwan, China. The DrayTek Vigor2960 suffers from a command execution vulnerability that can be exploited by an attacker to gain ROOT privileges...

Weak Password Vulnerability in DrayTek Series Router Login System

DrayTek Communication Technology Changshu Co., Ltd. Shanghai Branch is a wholly-owned subsidiary of Taiwan's DrayTek Technology Co., Ltd. and is formerly known as DrayTek Shanghai Office, which was established in October 2002. A weak password vulnerability exists in the login system of DrayTek...

Command Injection Vulnerability in DrayTek Vigor 2960/3900/300B VPN Firewalls

The DrayTek Vigor Series routers are dual WAN port security firewall routers designed for mid-sized businesses. A command injection vulnerability exists in the DrayTek Vigor 2960/3900/300B VPN Firewall, which can be exploited by an attacker to execute arbitrary commands to gain privileges on the...

CVE-2020-19664

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

CVE-2020-19664

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

Design/Logic Flaw

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

CVE-2020-19664

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

CVE-2020-19664

Conflict-free summary (CVE-2020-19664): Affects DrayTek Vigor2960 firmware, notably 1.5.1, where remote command execution is possible via shell metacharacters in a toLogin2FA action directed at mainfunction.cgi. Root cause: failure to neutralize shell metacharacters in the toLogin2FA path. Conseq...