Advisories · Technology

DrayTek Vigor 2960.

Every CVE that names DrayTek Vigor 2960 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-50994 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi
- DrayTek Vigor 2960
- Command injection
Not analysed yet 8 May 2026
CVE-2023-1163 CVE record

CVSS 6.5 Medium

DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal
- DrayTek Vigor 2960
- Path traversal
Not analysed yet 3 Mar 2023
CVE-2023-1162 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
- DrayTek Vigor 2960
- Command injection
Not analysed yet 3 Mar 2023
CVE-2023-1009 CVE record

CVSS 6.5 Medium

DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal
- DrayTek Vigor 2960
- Path traversal
Not analysed yet 24 Feb 2023