Critical severity9.8NVD Advisory· Published Jun 23, 2020· Updated Jun 17, 2026

CVE-2020-14993

Description

A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Draytek/Vigor2960 Firmware
cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1.1
Draytek/Vigor300b Firmware
cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1.1
Draytek/Vigor3900 Firmware
cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1.1
DrayTek/Vigor2960description
Draytek/Vigor 300Bllm-fuzzy
Range: <1.5.1.1
Draytek/Vigor2962llm-fuzzy
Range: <1.5.1.1
Draytek/Vigor3900llm-fuzzy
Range: <1.5.1.1

cvss	0.637
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-14993

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions