DrayTek Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for DrayTek products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

In CISA KEV

Beyond CISA KEV

Sensor Observed

Virtual Patch Available

6 DrayTek KEVs added all time (primary attestation date).

Attested CVEs

CVE	Product	Confidence	CISA KEV	Added
CVE-2024-12987 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection	Vigor2960, Vigor300B	Confirmed	In CISA	16 May 2025
CVE-2020-8515 DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as...	Vigor2960, Vigor3900, Vigor300B	Confirmed	In CISA	03 Nov 2021
CVE-2021-20123 A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet...	Draytek VigorConnect	Confirmed	In CISA	03 Sep 2024
CVE-2021-20124 A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An...	Draytek VigorConnect	Confirmed	In CISA	03 Sep 2024
CVE-2020-15415 On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via...	Vigor3900, Vigor2960, Vigor300B	Confirmed	In CISA	30 Sep 2024
CVE-2020-10826 /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via...	Vigor3900, Vigor2960, Vigor300B	High	Not in CISA	26 Mar 2020

CWE-78 — Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 3
CWE-22 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2
CWE-77 — Improper Neutralization of Special Elements used in a Command ('Command Injection') 2