Known vulnerabilities in Vigor 3900

Vendor: DrayTek Corp.
Software: Vigor 3900
Software CPE: cpe:2.3:h:draytek_corp:vigor_3900:*:*:*:*:*:*:*:*
Website: https://www.draytek.co.uk
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vigor 3900 Vigor 3900 is affected by 5 known vulnerabilities: 1 critical, 4 high Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72386 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-15415		 CWE-78 High
No
Exploited
 1.5.1.1 20.02.2023 SB2020062702
#VU29336 - Stack-based buffer overflow
CVE-2020-14993		 CWE-121 High
No
No
 1.5.1.1 27.06.2020 SB2020062702
#VU29335 - Stack-based buffer overflow
CVE-2020-14473		 CWE-121 High
No
No
 1.5.1.1 27.06.2020 SB2020062702
#VU29334 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-14472		 CWE-94 High
No
No
 1.5.1.1 27.06.2020 SB2020062702
#VU25350 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-8515		 CWE-74 Critical
Available
Exploited
 1.5.1 14.02.2020 SB2020021407