Unscored CVE-2020-14472 EUVD-2020-6609GHSA-f4vq-gwc5-g45p

On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunctio…

Published Jun 24, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file.

References

https://gist.github.com/WinMin/46165779215f1d47ec257210428c0240
https://gist.github.com/Cossack9989/fa9718434ceee4e6d4f6b0ad672c10f1