critical9.8
CVE-2020-14472
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file.
Impact
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Draytek | Vigor300b Firmware | before 1.5.1.1 |
| Draytek | Vigor2960 Firmware | before 1.5.1.1 |
| Draytek | Vigor3900 Firmware | before 1.5.1.1 |