DrayTek Vigor

The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.

• CVE-2020-8515Multiple DrayTek Vigor Routers Web Management Page Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 3 May 22

• CVE-2020-15415DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 21 Oct 24

• CVE-2024-12987DrayTek Vigor Routers OS Command Injection Vulnerability

  9.8 critical · over the network, without login · CISA deadline was 5 Jun 25

Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.