Vulnerabilidades do DrayTek Corporation Vigor3900 Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam DrayTek Corporation Vigor3900 Firmware: 2 registro(s), com versões afetadas e correções.
cpe:2.3:o:draytek:vigor3900_firmware

CVE-2020-15415 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-78 30/06/2020

DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472.

CVE-2020-8515 Crítica · 9.8 KEV Urgente · 81 Exploit público CWE-78 01/02/2020

Multiple DrayTek Vigor Routers Web Management Page Vulnerability

DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.