Description
DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_map_profile.`
Advisories 1
- WID-SEC-2024-3314 DrayTek Vigor: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Nov 5, 2024