Vigor2962
Vendor:
First CVE: Aug 29, 2022 · Active for 3 years
17
Total CVEs
More Total CVEs than 93% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
8.2
Avg CVSS
Higher Avg CVSS than 72% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Vigor2962 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 29, 2022
3 years ago
Most Recent CVE
Feb 27, 2025
515 days ago
CVE Severity & Scoring
Vigor296217 CVEs
18%
53%
29%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (5.9%)
Network12 (70.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network4 (23.5%)
Attack Complexity
Low17 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None14 (82.4%)
Unknown0 (0.0%)
Required3 (17.6%)
Privileges Required
Low7 (41.2%)
High0 (0.0%)
None10 (58.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-32548CRITICAL An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or passwo | Aug 29, 2022 | 9.8 | 50 | NO | NO |
CVE-2024-51138CRITICAL Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; V | Feb 27, 2025 | 9.8 | 31 | NO | NO |
CVE-2024-51139CRITICAL Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and | Feb 27, 2025 | 9.8 | 29 | NO | NO |
CVE-2024-41334HIGH Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior | Feb 27, 2025 | 8.8 | 29 | NO | NO |
CVE-2023-33778CRITICAL Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below | Jun 1, 2023 | 9.8 | 28 | NO | NO |
CVE-2024-41339HIGH An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, | Feb 27, 2025 | 8.8 | 27 | NO | NO |
CVE-2024-41593CRITICAL DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the | Oct 3, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-41592HIGH DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key | Oct 3, 2024 | 8.0 | 27 | NO | NO |
CVE-2024-41340HIGH An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762 | Feb 27, 2025 | 8.4 | 26 | NO | NO |
CVE-2024-41338HIGH A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9. | Feb 27, 2025 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (17 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (17 CVEs).
Media Mentions
Signals from CVEs in this product scope (17 CVEs).
Top CNAs Publishing CVEs For Vigor2962
Top CWEs
Versions
No cataloged versions.