High · 8.0 CVE-2024-43027 EUVD-2024-40018GHSA-g6mg-qmxh-mv93

DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovere…

Published Aug 21, 2024 · Updated Aug 23, 2024 · Assigned by mitre

Description

DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.

References

https://github.com/N1nEmAn/wp/blob/main/V3900.md