Threat Investigation
Request a demo

CVE-2020-14473

Critical

Description

Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1.

SeverityCritical
CVSS9.8
Exploit probability—
ProductDraytek Vigor300b Firmware
PublishedJun 24, 2020
First seenJun 24, 2020

How to fix

Update
  • draytek vigor300b_firmware1.5.1.1 or later
  • draytek vigor2960_firmware1.5.1.1 or later
  • draytek vigor3900_firmware1.5.1.1 or later

Affected products

ProductAffected versionsFixed in
draytek vigor300b_firmwarev < 1.5.1.11.5.1.1
draytek vigor2960_firmwarev < 1.5.1.11.5.1.1
draytek vigor3900_firmwarev < 1.5.1.11.5.1.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.