Vigor3900 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Draytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7) |
|---|---|
| Product | Vigor3900 Firmware (afe3fa67-349f-56f2-9d6e-370b74fd5f6b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-48153 |
vulnerable | 2026-06-08 06:48:13.648852 |
Details available
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_subconfig function.
Published: 2024-10-14T00:00:00.000Z
Updated: 2024-10-17T17:26:45.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44845 |
vulnerable | 2026-06-08 06:45:54.215216 |
Details available
DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filter_string function.
Published: 2024-09-06T00:00:00.000Z
Updated: 2024-09-10T16:50:04.104Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-44844 |
vulnerable | 2026-06-08 06:45:54.212786 |
Details available
DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function.
Published: 2024-09-06T00:00:00.000Z
Updated: 2024-09-10T16:47:57.554Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43027 |
vulnerable | 2026-06-08 06:45:47.229492 |
Details available
DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.
Published: 2024-08-21T00:00:00.000Z
Updated: 2024-08-23T17:57:39.551Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42911 |
vulnerable | 2026-06-08 05:35:23.028405 |
Details available
A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B <= 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code.
Published: 2022-03-29T19:30:16.000Z
Updated: 2024-08-04T03:47:12.398Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15415 |
vulnerable | 2026-06-08 05:19:25.892239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14993 |
vulnerable | 2026-06-08 05:19:25.077271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14473 |
vulnerable | 2026-06-08 05:19:23.520126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14472 |
vulnerable | 2026-06-08 05:19:23.518706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10828 |
vulnerable | 2026-06-08 05:16:35.941465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10827 |
vulnerable | 2026-06-08 05:16:35.940938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10826 |
vulnerable | 2026-06-08 05:16:35.940390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10825 |
vulnerable | 2026-06-08 05:16:35.939818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10824 |
vulnerable | 2026-06-08 05:16:35.939229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10823 |
vulnerable | 2026-06-08 05:16:35.936853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.