CISA KEV

CVE-2020-15415

DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used.

VendorDrayTek

ProductMultiple Vigor Routers

EPSS84.5%

Added to KEVSep 30, 2024

Remediation DueOct 21, 2024

Known Ransomware UseUnknown

CWECWE-78

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

From Disclosure to Action

Know how quickly you need to move.

For CVE-2020-15415, added to the catalogue on Sep 30, 2024 with a remediation deadline of Oct 21, 2024.

Added to KEVSep 30, 2024

Seraph AlertSame day

Remediation DueOct 21, 2024

ValidationOngoing

Overdue737 days overdue

Recommended action: Apply vendor remediation guidance.

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a tracked actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

References

More from DrayTek in the KEV catalogue.

CVE-2024-12987Vigor RoutersAdded May 15, 2025 CVE-2021-20123VigorConnectAdded Sep 03, 2024 CVE-2021-20124VigorConnectAdded Sep 03, 2024

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a KEV entry matches it.

Explore Seraph CTI Back to KEV Catalogue