Exploited vulnerabilities
DrayTek
5 DrayTek vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue5
Last 12 months0
In ransomware campaigns0
Last addition15 May 2025
The vulnerabilities5
- 15 May 2025CVE-2024-12987Vigor RoutersDrayTek Vigor Routers OS Command Injection Vulnerability
- 30 September 2024CVE-2020-15415Multiple Vigor RoutersDrayTek Multiple Vigor Routers OS Command Injection Vulnerability
- 3 September 2024CVE-2021-20124VigorConnectDraytek VigorConnect Path Traversal Vulnerability
- 3 September 2024CVE-2021-20123VigorConnectDraytek VigorConnect Path Traversal Vulnerability
- 3 November 2021CVE-2020-8515Multiple Vigor RoutersMultiple DrayTek Vigor Routers Web Management Page Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, DrayTek included.