Approved changes feed: RSS · Atom

cpe:2.3:o:draytek:vigor2960_firmware:1.5.1.3:*:*:*:*:*:*:*

part: o version: 1.5.1.3 update: *

VendorDraytek (7ad8e731-44c4-554d-87bc-d3dbc441f2c7)
ProductVigor2960 Firmware (042f9857-a251-537e-a0c8-63a1ead6847c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43118 vulnerable 2026-06-08 05:36:42.299426 Details available
A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary code.
Published: 2022-03-29T19:37:57.000Z
Updated: 2024-08-04T03:47:13.571Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.