DrayTek · Multiple Vigor Routers
CVE-2020-8515
Multiple DrayTek Vigor Routers Web Management Page Vulnerability
What it is
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.
CISA: DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 3, 2022
- Added to the CISA list
- November 3, 2021
- Published
- February 1, 2020
- Severity
- Critical 9.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- >99.9% in the top 0.1% of all known vulnerabilities
- Weakness
- CWE-78
- More details
- NVD · CVE.org · CISA
All references (3)
- https://sku11army.blogspot.com/2020/01/draytek-unauthenticated-rce-in-draytek.html
- https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-router-web-management-page-…
- http://packetstormsecurity.com/files/156979/DrayTek-Vigor2960-Vigor3900-Vigor300B-Remote-Command-Execution.ht…
More exploited flaws from DrayTek
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 30, 2024 | OS Command Injection | Multiple Vigor Routers | Critical 9.8 | 84% |
| May 15, 2025 | OS Command Injection | Vigor Routers | Medium 6.9 | 98% |
| Sep 3, 2024 | Path Traversal Vulnerability | VigorConnect | High 7.5 | 90% |
| Sep 3, 2024 | Path Traversal Vulnerability | VigorConnect | High 7.5 | 96% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.