References https://github.com/adysec/POC/blob/main/wpoc/%E8%B7%AF%E7%94%B1%E5%99%A8/draytek%E8%B7%AF%E7%94%B1%E5%99%A8addrouting%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/weixin_43167326/article/details/137866166 https://cn-sec.com/archives/2666487.html https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/DrayTek%E4%BC%81%E4%B8%9A%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C-CVE-2020-8515.md https://cn-sec.com/archives/1423548.html
Related VulnerabilitiesPoCCVE-2020-15415: DrayTek Vigor - Command InjectionPoCCVE-2020-8515: DrayTek - Remote Code ExecutionPoCCVE-2021-20123: Draytek VigorConnect 1.6.0-B - Local File InclusionPoCCVE-2021-20124: Draytek VigorConnect 6.0-B3 - Local File InclusionPoCCVE-2024-12987: DrayTek Vigor - Command InjectionPoCCVE-2020-8515: DrayTek pre-auth RCEDrayTek Vigor2960 Router 命令注入漏洞DrayTek Vigor 路由器缓冲区溢出漏洞 可致远程代码执行PoCdraytek路由器addrouting命令执行漏洞DrayTek Vigor 路由器命令注入漏洞Draytek vigor 2960 CVE-2023-1163 任意文件读取漏洞DrayTek Vigor 2960路由器 CVE-2023-1162 命令注入漏洞DrayTek Vigor AP910C 路由器默认口令漏洞