Known vulnerabilities in Vigor 2860

Vendor: DrayTek Corp.
Software: Vigor 2860
Software CPE: cpe:2.3:h:draytek_corp:vigor_2860:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vigor 2860 Vigor 2860 is affected by 15 known vulnerabilities: 1 critical, 4 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-41585		 CWE-78 Medium
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97985 - Credentials Management
CVE-2024-41589		 CWE-255 Medium
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97983 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2024-41594		 CWE-338 Medium
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97982 - Memory corruption
CVE-2024-41595		 CWE-119 Low
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97981 - Memory corruption
CVE-2024-41586		 CWE-119 Low
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97980 - Memory corruption
CVE-2024-41596		 CWE-119 Low
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97978 - Memory corruption
CVE-2024-41593		 CWE-119 Low
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97977 - Memory corruption
CVE-2024-41590		 CWE-119 Low
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97976 - Memory corruption
CVE-2024-41588		 CWE-119 Low
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97975 - Memory corruption
CVE-2024-41592		 CWE-119 Critical
No
No
 3.9.8 03.10.2024 SB2024100306
#VU97969 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41584		 CWE-79 Low
No
No
 3.9.8 02.10.2024 SB2024100306
#VU97968 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41591		 CWE-79 Low
No
No
 3.9.8 02.10.2024 SB2024100306
#VU97967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41587		 CWE-79 Low
No
No
 3.9.8 02.10.2024 SB2024100306
#VU97966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41583		 CWE-79 Low
No
No
 3.9.8 02.10.2024 SB2024100306
#VU12851 - Cross-Site Request Forgery (CSRF)
CVE-2018-20872		 CWE-352 Medium
No
Exploited
 - 19.05.2018 SB2018051901