← All advisories

High severity8.8NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-19664

CVE-2020-19664

Description

DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Draytek/Vigor2960 Firmware
cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*
Range: <=1.5.1
DrayTek/Vigor2960description
Draytek/Vigor 300Bllm-fuzzy
Draytek/Vigor2962llm-fuzzy
Range: = 1.5.1
Draytek/Vigor3900llm-fuzzy

Patches

Vulnerability mechanics

References

2

nosec.org/home/detail/4631.htmlnvdExploitThird Party Advisory
www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-remote-code-injection/execution-vulnerability-%28cve-2020-19664%29/nvd

News mentions

0

No linked articles in our index yet.