CVE-2020-14473

30

FAUCET Score

CVE-2020-14473 is a critical stack-based buffer overflow vulnerability affecting DrayTek Vigor3900, Vigor2960, and Vigor300B routers with firmware versions prior to 1.5.1.1. This flaw allows an unauthenticated attacker to execute arbitrary code remotely with high impact on confidentiality, integrity, and availability, as indicated by its CVSS score of 9.8 (Critical). While there is no evidence of active exploitation in the wild (not in KEV) and no public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, suggesting potential interest from researchers or threat actors. Organizations using affected DrayTek devices should prioritize updating their firmware to mitigate this severe risk.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 1.5.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor300b_firmware::::::::
		< 1.5.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor2960_firmware::::::::
		< 1.5.1.1CPE matchmatch criteria	cpe:2.3:o:draytek:vigor3900_firmware::::::::

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

2.30%

Probability of exploitation in next 30 days

EPSS Percentile

81.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0230 is in the 71st percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (7)

capnprotovendor investigatingvia llm_extracted

ciscovendor investigatingvia llm_extracted

hedgedocvendor investigatingvia llm_extracted

hpvendor investigatingvia llm_extracted

jenkinsvendor investigatingvia llm_extracted

lycheeorgvendor investigatingvia llm_extracted

yokogawavendor investigatingvia llm_extracted

Vendor Advisories (7)

yokogawallm-yokogawa-6f66dae00f590f48

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

lycheeorgllm-lycheeorg-1eee701501e2a96c

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

jenkinsllm-jenkins-eb53e64ea92cad03

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

hpllm-hp-d00ab204d85e217f

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

hedgedocllm-hedgedoc-d0e30463c1f5d24c

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

capnprotollm-capnproto-0f7922187edb2337

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

ciscollm-cisco-18bd908e8b1d1d78

Vigor3900 / Vigor2960 / Vigor300B Stack-based buffer overflow Vulnerability (CVE-2020-14473 / CVE-2020-14993)

References

github.com / Cossack9989/Vulns/blob/master/IoT/CVE-2020-14473.md

ExploitThird Party Advisory

draytek.com / about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability-%28cve-2020-14473%29