{"cvss":9.8,"datePublished":"2022-01-12T00:00:00Z","dateUpdated":"2022-01-12T00:00:00Z","description":"/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTTP request in DEBUG mode.","dueDate":"","id":"CVE-2020-10826","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"vigor300b_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"DrayTek vigor300b_firmware Improper Neutralization of Special Elements used in a Command","vendor":"DrayTek"}