Vigor300B vulnerabilities

2 known vulnerabilities in Vigor300B from DrayTek. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DrayTek Vigor Routers OS Command Injection Exploited

  CVE-2024-12987Dec 27, 2024DrayTekEPSS 98.2%

  A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argum

• 9.8 Critical severity

  Vigor2960: Improper Neutralization of Special Elements used in a Command

  CVE-2024-12986Dec 27, 2024DrayTekEPSS 35.5%

  A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The m