Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

DrayTek

Products: Vigor 300B · Vigor2960 · Vigor300B

40.6

Score

3

CVEs

1

Active

2

PoC

1

KEV

#65

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-3040	2026-02-23	5.1v4.0	POC	—	Low	High	no	0.0	Vigor 300B	A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command injection. The attack may be initiated remot
CVE-2024-12986	2024-12-27	6.9v4.0	POC	—	Low	None	YES	0.0	Vigor2960Vigor300B	A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session lead
CVE-2024-12987	2024-12-27	6.9v4.0	ACTIVE		Low	None	YES	40.6	Vigor2960Vigor300B	A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injectio

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3