Description
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the sign_cacertificate function.
Advisories 1
- WID-SEC-2024-3314 DrayTek Vigor: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Nov 5, 2024