CVE-2020-8515

Multiple DrayTek Vigor Routers Web Management Page Vulnerability

DrayTek — Multiple Vigor Routers

Added to KEV catalog: 3 November 2021
Federal remediation due date: 3 May 2022
Weakness classification (CWE): CWE-78

CISA Description

DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-8515

View on NVD View on MITRE CVE View full CISA catalog

More DrayTek Vulnerabilities

CVE-2024-12987

DrayTek Vigor Routers OS Command Injection Vulnerability

CVE-2020-15415

DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

CVE-2021-20124

Draytek VigorConnect Path Traversal Vulnerability

CVE-2021-20123

Draytek VigorConnect Path Traversal Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services