COOEY // HUBcompliance · community · intelligence

FAIL › dossier

Multiple Vigor Routers product

2
failure events
0
zero-days
2
RCEs
2
on KEV
0
critical
65
worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 2 events

DateEventSevFlagsShameSummary
2024-09-30 CVE-2020-15415 high ⚡RCE ⌖KEV 65 DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used.
2021-11-03 CVE-2020-8515 high ⚡RCE ⌖KEV 65 DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution.