Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Draytek
Vigor3900 Firmware

draytek vigor3900 firmware Vulnerabilities: CVEs, CISA KEV & Security Advisories

48 CVEs

2 in CISA KEV

draytek vigor3900 firmware Vulnerabilities

CVE security advisories and vulnerability history for vigor3900 firmware by draytek.

48

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

44

Public exploits

With known exploit

8.7

Avg CVSS

2020–2024

Last updated November 4, 2024

Overview

draytek vigor3900 firmware has 48 published CVE records since 2020, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 44 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting draytek vigor3900 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of draytek vigor3900 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical13

High30

Medium0

Low0

5 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of draytek vigor3900 firmware's CVEs are confirmed exploited in the wild.

Public exploits

44

44 of draytek vigor3900 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every draytek vigor3900 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

1.5.17 CVEs
1.5.1.13 CVEs
1.5.1.51 CVE

Find a version

48 CVEs

Sort

High vulnerability · 2024-11-04
CVE-2024-51253
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.1% (35th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-51251
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.1% (35th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-51249
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.1% (35th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-51246
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.1% (35th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45893
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.8% (74th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45891
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.6% (69th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45890
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.6% (69th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45889
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.6% (70th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45888
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.4% (62th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45887
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.4% (62th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45885
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.6% (69th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45884
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.4% (62th pct)2024-11-04
High vulnerability · 2024-11-04
CVE-2024-45882
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.6% (69th pct)2024-11-04
High vulnerability · 2024-11-01
CVE-2024-51252
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.3% (51th pct)2024-11-01
High vulnerability · 2024-11-01
CVE-2024-51248
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.2% (42th pct)2024-11-01
High vulnerability · 2024-11-01
CVE-2024-51247
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.2% (42th pct)2024-11-01
High vulnerability · 2024-11-01
CVE-2024-51245
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.2% (42th pct)2024-11-01
High vulnerability · 2024-11-01
CVE-2024-51244
Public exploit
CWE-78
High · CVSS 8.0
EPSS 0.2% (42th pct)2024-11-01
Critical vulnerability · 2024-10-31
CVE-2024-51260
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 0.2% (48th pct)2024-10-31
Critical vulnerability · 2024-10-31
CVE-2024-51259
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 0.2% (36th pct)2024-10-31
Critical vulnerability · 2024-10-31
CVE-2024-51255
Public exploit
CWE-77
Critical · CVSS 9.8
EPSS 0.2% (44th pct)2024-10-31
High vulnerability · 2024-10-31
CVE-2024-51254
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.1% (27th pct)2024-10-31
High vulnerability · 2024-10-30
CVE-2024-51304
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (48th pct)2024-10-30
High vulnerability · 2024-10-30
CVE-2024-51301
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (40th pct)2024-10-30
High vulnerability · 2024-10-30
CVE-2024-51300
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (40th pct)2024-10-30
High vulnerability · 2024-10-30
CVE-2024-51299
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (40th pct)2024-10-30
Critical vulnerability · 2024-10-30
CVE-2024-51298
Public exploit
CWE-94
Critical · CVSS 9.8
EPSS 0.2% (40th pct)2024-10-30
High vulnerability · 2024-10-30
CVE-2024-51296
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (40th pct)2024-10-30
High vulnerability · 2024-10-30
CVE-2024-51258
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (48th pct)2024-10-30
High vulnerability · 2024-10-30
CVE-2024-51257
Public exploit
CWE-77
High · CVSS 8.8
EPSS 0.2% (36th pct)2024-10-30

Showing 30 of 48

Common weakness types

The CWE weakness categories most often found in draytek vigor3900 firmware CVEs. Follow any weakness for its full explanation.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')21 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')16 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')1 CVE

Disclosure activity by year

How many draytek vigor3900 firmware CVEs were published each year.

2020

11

2022

2

2024

35

Other draytek products

Browse vulnerabilities for other products by draytek.

vigor391060 CVEs vigor3910 firmware60 CVEs vigor390048 CVEs vigor3900_firmware35 CVEs vigor296021 CVEs vigor2960 firmware21 CVEs vigor2925 firmware17 CVEs vigor296217 CVEs

All draytek vulnerabilities

Frequently asked questions

Common questions about draytek vigor3900 firmware vulnerabilities.

How many CVEs does draytek vigor3900 firmware have?

draytek vigor3900 firmware has 48 published CVE records since 2020.

How many draytek vigor3900 firmware CVEs are in CISA KEV?

Yes — 2 of draytek vigor3900 firmware's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for draytek vigor3900 firmware vulnerabilities?

Yes — 44 of draytek vigor3900 firmware's CVEs have a known public exploit.

Which versions of draytek vigor3900 firmware are affected?

3 distinct draytek vigor3900 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in draytek vigor3900 firmware CVEs?

draytek vigor3900 firmware's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-787 (Out-of-bounds Write), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical draytek vigor3900 firmware vulnerabilities are there?

draytek vigor3900 firmware has 13 critical and 30 high-severity CVEs.

What is the average severity of draytek vigor3900 firmware CVEs?

The average CVSS base score across draytek vigor3900 firmware's scored CVEs is 8.7.

References

All draytek vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track draytek vigor3900 firmware vulnerabilities

Monitor new draytek vigor3900 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References