Weak Password Vulnerability in DrayTek Series Router Login System

DrayTek Communication Technology Changshu Co., Ltd. Shanghai Branch is a wholly-owned subsidiary of Taiwan's DrayTek Technology Co., Ltd. and is formerly known as DrayTek Shanghai Office, which was established in October 2002. A weak password vulnerability exists in the login system of DrayTek...

Command Injection Vulnerability in DrayTek Vigor 2960/3900/300B VPN Firewalls

The DrayTek Vigor Series routers are dual WAN port security firewall routers designed for mid-sized businesses. A command injection vulnerability exists in the DrayTek Vigor 2960/3900/300B VPN Firewall, which can be exploited by an attacker to execute arbitrary commands to gain privileges on the...

CVE-2020-19664

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

CVE-2020-19664

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

Design/Logic Flaw

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

CVE-2020-19664

Conflict-free summary (CVE-2020-19664): Affects DrayTek Vigor2960 firmware, notably 1.5.1, where remote command execution is possible via shell metacharacters in a toLogin2FA action directed at mainfunction.cgi. Root cause: failure to neutralize shell metacharacters in the toLogin2FA path. Conseq...

CVE-2020-19664

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi...

Draytek Vigor2960 Parameter Injection Vulnerability

The Draytek Vigor2960 is a load balancing router and VPN gateway appliance from Draytek Taiwan, China. A parameter injection vulnerability exists in the DrayTek Vigor2960 1.5.1, which allows remote command execution via toLogin2FA action to mainfunction.cgi...

Command Execution Vulnerability in Vigor2960

Vigor2960 is a load balancing router and VPN gateway appliance from DrayTek Taiwan, China. The Vigor2960 suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a server...

DrayTek Vigor Detection

Binary data draytekvigordetect.nbin...

DrayTek Vigor < 1.5.1 Unauthenticated RCE (Direct Check)

Nessus was able to exploit an un-authenticated remote command execution vulnerability on the web adminstration UI on the remote router and was able to retrieve the contents of /etc/passwd. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid141781; scriptversion"1.6";...

DrayTek Command Injection (CVE-2020-15415)

A command injection vulnerability exists in DrayTek. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DrayTek Vigor Remote Code Execution (CVE-2020-14472)

A remote code execution vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DrayTek Vigor Buffer Overflow (CVE-2020-14473)

A buffer overflow vulnerability exists in DrayTek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

DrayTek Buffer Overflow (CVE-2020-14993)

A buffer overflow vulnerability exists in DrayTek. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

DrayTek Vigor3900, Vigor2960, and Vigor300B OS Command Injection Vulnerabilities (CNVD-2020-51416)

DrayTek Vigor3900 and others are products of DrayTek Taiwan, China.DrayTek Vigor3900 is a broadband router/VPN gateway appliance.Vigor2960 is a load-balancing router and VPN gateway appliance.Vigor300B is a load-balancing router. An operating system command injection vulnerability exists in DrayT...

CVE-2020-15415

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472...

CVE-2020-15415

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472...

Design/Logic Flaw

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472...

CVE-2020-15415

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472...