Description
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldap_search_dn function.
Advisories 1
- WID-SEC-2024-3314 DrayTek Vigor: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Nov 5, 2024