Live › vulnerability › CVE-2020-8515
Go to dashboardDrayTek Vigor3900, Vigor2960 and Vigor300B routers have an unspecified flaw in their web management page that allows remote code execution. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| DrayTek Multiple Vigor Routers | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the vendor update for the affected Vigor model per CISA guidance; the specific firmware version is not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.
This page as .md · .json · in your agent: get_signal("CVE-2020-8515")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.