https://exploit-radar.com/en/flux/marques/draytek.xml Exploit Radar: exploited DrayTek vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for DrayTek products. 2025-05-15T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2024-12987/ CVE-2024-12987 — DrayTek Vigor (routers) 2025-05-15T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. For cloud services, follow the guidance from DrayTek. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 15, 2025. https://exploit-radar.com/en/cve/CVE-2020-15415/ CVE-2020-15415 — DrayTek Vigor (routers) 2024-09-30T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2024. https://exploit-radar.com/en/cve/CVE-2021-20123/ CVE-2021-20123 — DrayTek VigorConnect 2024-09-03T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2024. https://exploit-radar.com/en/cve/CVE-2021-20124/ CVE-2021-20124 — DrayTek VigorConnect 2024-09-03T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2024. https://exploit-radar.com/en/cve/CVE-2020-8515/ CVE-2020-8515 — DrayTek Vigor (routers) 2021-11-03T00:00:00Z Apply the security update from DrayTek. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.