Multiple Vulnerabilities in VigorSwitch Series

Number: DSA-2026-003

On June 1, several potential security vulnerabilities were identified within the DrayTek VigorSwitch mainfunction.cgi component, including Command Injection, Null Pointer Dereference, Directory Traversal and Buffer Overflow.

Several vulnerabilities have been identified in the affected code. At the time of publication, DrayTek is not aware of any successful exploitation methods or active attacks targeting these vulnerabilities. If a viable exploitation method were identified, it would likely require an attacker to possess valid administrative credentials and be able to authenticate to the switch's web management interface.

Should a method be identified that allows these conditions to be reached and successfully exploited, they could potentially result in arbitrary code execution on an affected appliance. However, the feasibility of such exploitation has not been demonstrated. DrayTek Corp has addressed these findings in updated firmware releases and recommends that customers upgrade to the versions listed below as a preventive security measure.

Vulnerability Details

The firmware updates are released for the following models. No other models are affected. Please click here to download and upgrade the firmware for your specific model as soon as possible to ensure your system remains up to date.

Affected Products and Recommended Firmware Versions

Recognising Contribution

DrayTek would like to thank Jincheng Wang (@winmt), Professor Le Yu of Nanjing University of Posts and Telecommunications, and Professor Xiapu Luo of The Hong Kong Polytechnic University.

Contact Technical Support

If you have any security-related queries, please reach out to us via the contact form to connect with our technical team.