PatchTheCVEvigor300b firmware vulnerabilities and fixes
Recent CVEs affecting vigor300b firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: vigor300bfirmware.
vigor300b firmware has 4 tracked vulnerabilities, 0 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 4. Most recent: 2026-02-23. Highest priority: CVE-2024-12987 (score 89/100).
- CVE-2026-3040 MEDIUM 4.7 UPGRADE A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6
- CVE-2024-43027 HIGH 8.0 UPGRADE UPGRADE DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before
- CVE-2024-12987 HIGH 7.3 EXPLOITED MITIGATE MITIGATE DrayTek Vigor Routers OS Command Injection Vulnerability
- CVE-2024-12986 HIGH 7.3 UPGRADE UPGRADE A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1
FAQ
How do I fix vigor300b firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vigor300b firmware being exploited right now?
Yes: 1 vigor300b firmware CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which vigor300b firmware CVE should I patch first?
CVE-2024-12987 currently ranks highest (89/100): DrayTek Vigor Routers OS Command Injection Vulnerability.