Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

VigorSwitch G2540xs — Vulnerabilities & Security Advisories 29

All 29 CVE vulnerabilities found in VigorSwitch G2540xs, with AI-generated Chinese analysis, references, and POCs.

This page aggregates all known security weaknesses for the DrayTek VigorSwitch G2540xs, specifically categorized under the network switch hardware tag. The collection encompasses a comprehensive range of reported flaws, including remote code execution, denial of service, and authentication bypasses, covering the device's entire lifecycle from its initial market release through the most recent security bulletins. Visitors can utilize this resource to track the vendor's official advisories over time, understand the specific characteristics of common switch-related weakness classes, or review the complete historical vulnerability record for this specific model. The data presented here is derived from public disclosures and vendor communications, offering a centralized view of the product's security posture without requiring cross-referencing of multiple disparate sources. By consolidating these entries, the page facilitates efficient risk assessment for network administrators and security analysts responsible for maintaining the integrity of enterprise switching infrastructure. No specific CVE identifiers are listed in this summary, but the underlying database contains detailed mappings to all associated vulnerability codes for those seeking granular technical information. This compilation serves as a factual reference point for evaluating the long-term security stability of the VigorSwitch G2540xs in various deployment scenarios.

Vendor: DrayTek Corporation

CVE ID Title CVSS Severity Published
CVE-2026-71943 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet CWE-78 7.2 High 2026-08-24
CVE-2026-71942 DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalert CWE-120 7.2 High 2026-08-24
CVE-2026-71941 DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail CWE-120 7.2 High 2026-08-24
CVE-2026-71940 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE CWE-120 7.2 High 2026-08-24
CVE-2026-71939 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE CWE-120 7.2 High 2026-08-24
CVE-2026-71938 DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp CWE-120 7.2 High 2026-08-24
CVE-2026-71937 DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile CWE-120 7.2 High 2026-08-24
CVE-2026-71936 DrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot CWE-120 7.2 High 2026-08-24
CVE-2026-71934 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace CWE-120 7.2 High 2026-08-24
CVE-2026-71935 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction CWE-120 7.2 High 2026-08-24
CVE-2026-71933 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions CWE-862 9.1 Critical 2026-08-24
CVE-2026-71931 DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade CWE-78 7.2 High 2026-08-24
CVE-2026-71932 DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile CWE-22 4.9 Medium 2026-08-24
CVE-2026-71930 DrayTek VigorSwitch Multiple Models OS Command Injection via setTime CWE-78 7.2 High 2026-08-24
CVE-2026-71928 DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice CWE-78 7.2 High 2026-08-24
CVE-2026-71929 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto CWE-78 7.2 High 2026-08-24
CVE-2026-71927 DrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice CWE-78 7.2 High 2026-08-24
CVE-2026-71925 DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail CWE-78 7.2 High 2026-08-24
CVE-2026-71926 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevice CWE-78 7.2 High 2026-08-24
CVE-2026-71924 DrayTek VigorSwitch Multiple Models OS Command Injection via getVid CWE-78 7.2 High 2026-08-24
CVE-2026-71922 DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi CWE-476 7.5 High 2026-08-24
CVE-2026-71923 DrayTek VigorSwitch Multiple Models OS Command Injection via auth_set CWE-78 7.2 High 2026-08-24
CVE-2026-71921 DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi CWE-78 9.8 Critical 2026-08-24
CVE-2026-71919 DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot CWE-78 7.2 High 2026-08-24
CVE-2026-71920 DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout CWE-476 4.9 Medium 2026-08-24
CVE-2026-71918 DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction CWE-78 7.2 High 2026-08-24
CVE-2026-71917 DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace CWE-78 7.2 High 2026-08-24
CVE-2026-71916 DrayTek VigorSwitch Multiple Models OS Command Injection via commandTable CWE-78 7.2 High 2026-08-24
CVE-2026-71915 DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatus CWE-78 7.2 High 2026-08-24

All 29 known CVE vulnerabilities affecting VigorSwitch G2540xs with full Chinese analysis, references, and POCs where available.