CVE-2020-8515criticalunder attackCWE-78

CVE-2020-8515

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon58 days
Published on NVDFeb 1
1st PoC+58d
CISA KEV+641d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

DrayTek router models allow attackers to execute malicious commands with root privileges without needing a password, by sending specially crafted requests to a web interface. This lets attackers take complete control of the device.

Technical detail

Unauthenticated remote code execution (RCE) in DrayTek Vigor devices via shell metacharacter injection in the mainfunction.cgi endpoint. The vulnerability bypasses authentication and executes arbitrary commands with root privileges; no pre-conditions beyond network access to the web interface are required.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.