Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Draytek
Vigorswitch Fx2120

draytek VigorSwitch FX2120 Vulnerabilities: CVEs, CISA KEV & Security Advisories

30 CVEs

DR

draytek VigorSwitch FX2120 Vulnerabilities

CVE security advisories and vulnerability history for VigorSwitch FX2120 by draytek.

30

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.6

Avg CVSS

2023–2026

Last updated August 24, 2026

Overview

draytek VigorSwitch FX2120 has 30 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.

Severity and exploitation

How the CVSS severity of draytek VigorSwitch FX2120's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High26

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of draytek VigorSwitch FX2120's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of draytek VigorSwitch FX2120's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every draytek VigorSwitch FX2120 version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.9.1029 CVEs

Fixed in

3.9.1029 CVEs

Find a version

30 CVEs

Sort

DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet
CVE-2026-71943
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalert
CVE-2026-71942
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail
CVE-2026-71941
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE
CVE-2026-71940
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE
CVE-2026-71939
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp
CVE-2026-71938
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile
CVE-2026-71937
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot
CVE-2026-71936
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction
CVE-2026-71935
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace
CVE-2026-71934
Patch
CWE-120
High · CVSS 8.6
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
CVE-2026-71933
Patch
CWE-862
High · CVSS 8.8
EPSS 0.6% (45th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile
CVE-2026-71932
Patch
CWE-22
Medium · CVSS 6.9
EPSS 1.0% (63th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade
CVE-2026-71931
Patch
CWE-78
High · CVSS 8.6
EPSS 1.8% (78th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via setTime
CVE-2026-71930
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto
CVE-2026-71929
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice
CVE-2026-71928
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice
CVE-2026-71927
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via setDevice
CVE-2026-71926
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail
CVE-2026-71925
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via getVid
CVE-2026-71924
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via auth_set
CVE-2026-71923
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi
CVE-2026-71922
Patch
CWE-476
High · CVSS 8.7
EPSS 0.7% (52th pct)2026-08-24
DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi
CVE-2026-71921
Patch
CWE-78
Critical · CVSS 9.3
EPSS 2.8% (86th pct)2026-08-24
DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout
CVE-2026-71920
Patch
CWE-476
Medium · CVSS 6.9
EPSS 0.6% (45th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot
CVE-2026-71919
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction
CVE-2026-71918
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace
CVE-2026-71917
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via commandTable
CVE-2026-71916
Patch
CWE-78
High · CVSS 8.6
EPSS 1.8% (78th pct)2026-08-24
DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatus
CVE-2026-71915
Patch
CWE-78
High · CVSS 8.6
EPSS 2.3% (83th pct)2026-08-24
Critical vulnerability · 2023-06-01
CVE-2023-33778
Public exploit
Patch
CWE-798
Critical · CVSS 9.8
EPSS 0.6% (47th pct)2023-06-01

Common weakness types

The CWE weakness categories most often found in draytek VigorSwitch FX2120 CVEs. Follow any weakness for its full explanation.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')16 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE
CWE-798Use of Hard-coded Credentials1 CVE
CWE-862Missing Authorization1 CVE

Disclosure activity by year

How many draytek VigorSwitch FX2120 CVEs were published each year.

2023

1

2026

29

Other draytek products

Browse vulnerabilities for other products by draytek.

vigor391061 CVEs vigor3910 firmware60 CVEs vigor390048 CVEs vigor3900 firmware48 CVEs vigorswitch fx2120 firmware30 CVEs VigorSwitch G128230 CVEs vigorswitch g1282 firmware30 CVEs VigorSwitch G210030 CVEs

All draytek vulnerabilities

Frequently asked questions

Common questions about draytek VigorSwitch FX2120 vulnerabilities.

How many CVEs does draytek VigorSwitch FX2120 have?: draytek VigorSwitch FX2120 has 30 published CVE records since 2023.
How many draytek VigorSwitch FX2120 CVEs are in CISA KEV?: None of draytek VigorSwitch FX2120's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for draytek VigorSwitch FX2120 vulnerabilities?: Yes — 1 of draytek VigorSwitch FX2120's CVEs have a known public exploit.
Which versions of draytek VigorSwitch FX2120 are affected?: 2 distinct draytek VigorSwitch FX2120 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in draytek VigorSwitch FX2120 CVEs?: draytek VigorSwitch FX2120's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-476 (NULL Pointer Dereference), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical draytek VigorSwitch FX2120 vulnerabilities are there?: draytek VigorSwitch FX2120 has 2 critical and 26 high-severity CVEs.
What is the average severity of draytek VigorSwitch FX2120 CVEs?: The average CVSS base score across draytek VigorSwitch FX2120's scored CVEs is 8.6.

References

All draytek vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track draytek VigorSwitch FX2120 vulnerabilities

Get an alert for each new draytek VigorSwitch FX2120 CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References