CVE-2020-15415
CRITICAL KEV NUCLEIDrayTek Vigor3900/Vigor2960/Vigor300B <1.5.1 - RCE
Title source: llmDescription
On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472.
Nuclei Templates (1)
DrayTek Vigor - Command Injection
CRITICALVERIFIEDby ritikchaddha
FOFA:
"excanvas.js" && "lang == \"zh-cn\"" && "detectLang" && server=="DWS"
Scores
CVSS v3
9.8
EPSS
0.9300
EPSS Percentile
99.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CISA KEV
2024-09-30
VulnCheck KEV
2023-02-15
InTheWild.io
2021-01-22
ENISA EUVD
EUVD-2020-7408
CWE
CWE-78
Status
published
Products (3)
draytek/vigor2960_firmware
< 1.5.1
draytek/vigor300b_firmware
< 1.5.1
draytek/vigor3900_firmware
< 1.5.1
Published
Jun 30, 2020
KEV Added
Sep 30, 2024
Tracked Since
Feb 18, 2026