DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi.

Published Dec 31, 2020 · Updated Aug 4, 2024 · Assigned by mitre