Vigor 2960 vulnerabilities

2 known vulnerabilities in Vigor 2960 from DrayTek. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Vigor 2960: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-50994May 8, 2026DrayTekEPSS 1.43%

  DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attackers to execute arbitrary commands by injecting shell metacharacters into the formpassword para

• 8.8 High severity

  Vigor 2960: Improper Neutralization of Special Elements used in a Command

  CVE-2023-1162Mar 3, 2023DrayTekEPSS 26%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the