https://pwn.watch/t/draytek Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 15 May 2025 00:00:00 GMT https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987 https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987 Thu, 15 May 2025 00:00:00 GMT medium <p>DrayTek Vigor2960, Vigor300B, and Vigor3900 routers contain an OS command injection vulnerability due to an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component web management interface. Added to CISA KEV on 2025-05-15.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-05-15: CISA added CVE-2024-12987 to the KEV catalog (due 2025-06-05).</li></ul> <p><strong>CVEs:</strong> CVE-2024-12987</p> https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415 https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415 Mon, 30 Sep 2024 00:00:00 GMT critical <p>DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used. Added to the CISA KEV catalog on 2024-09-30. CVE-2020-15415 was assigned before 2024; the KEV listing came in 2024.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-09-30: CISA added CVE-2020-15415 to the KEV catalog (federal deadline 2024-10-21) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2020-15415</p> https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124 https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124 Tue, 03 Sep 2024 00:00:00 GMT high <p>CVE-2021-20123: Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. CVE-2021-20124: Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges. Added to the CISA KEV catalog on 2024-09-03. CVE-2021-20123, CVE-2021-20124 were assigned before 2024; the KEV listing came in 2024.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2024-09-03: CISA added CVE-2021-20123 to the KEV catalog (federal deadline 2024-09-24) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li><li>2024-09-03: CISA added CVE-2021-20124 to the KEV catalog (federal deadline 2024-09-24) (<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">source</a>)</li></ul> <p><strong>CVEs:</strong> CVE-2021-20123, CVE-2021-20124</p>