Security Digest
DrayTek: known exploited vulnerabilities
4 DrayTek CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-05-15 | CVE-2024-12987 | DrayTek Vigor Routers DrayTek Vigor Routers OS Command Injection Vulnerability | 2025-06-05 |
| 2024-09-30 | CVE-2020-15415 | DrayTek Multiple Vigor Routers DrayTek Multiple Vigor Routers OS Command Injection Vulnerability | 2024-10-21 |
| 2024-09-03 | CVE-2021-20124 | DrayTek VigorConnect Draytek VigorConnect Path Traversal Vulnerability | 2024-09-24 |
| 2024-09-03 | CVE-2021-20123 | DrayTek VigorConnect Draytek VigorConnect Path Traversal Vulnerability | 2024-09-24 |