{"cvss":9.8,"datePublished":"2023-02-15T00:00:00Z","dateUpdated":"2023-02-15T00:00:00Z","description":"DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used.","dueDate":"2024-10-21T00:00:00Z","id":"CVE-2020-15415","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Vigor Routers","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","vendor":"DrayTek"}