---
title: "DrayTek: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/draytek/
description: "Every DrayTek vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-05-15
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# DrayTek: known exploited vulnerabilities

- 2025-05-15 [CVE-2024-12987](https://erroneo.us/security/cve/CVE-2024-12987/index.md) DrayTek Vigor Routers: DrayTek Vigor Routers OS Command Injection Vulnerability (due 2025-06-05; ransomware: Unknown)
- 2024-09-30 [CVE-2020-15415](https://erroneo.us/security/cve/CVE-2020-15415/index.md) DrayTek Multiple Vigor Routers: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability (due 2024-10-21; ransomware: Unknown)
- 2024-09-03 [CVE-2021-20124](https://erroneo.us/security/cve/CVE-2021-20124/index.md) DrayTek VigorConnect: Draytek VigorConnect Path Traversal Vulnerability  (due 2024-09-24; ransomware: Unknown)
- 2024-09-03 [CVE-2021-20123](https://erroneo.us/security/cve/CVE-2021-20123/index.md) DrayTek VigorConnect: Draytek VigorConnect Path Traversal Vulnerability  (due 2024-09-24; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/draytek/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt