Lucene search
PRIOn knowledge basePRION:CVE-2021-42911HistoryMar 29, 2022 - 8:15 p.m.
Format string
2022-03-2920:15:00
PRIOn knowledge base
www.prio-n.com
6
A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B <= 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vigor2960_firmware | le | 1.5.1.3 | |
| vigor300b_firmware | le | 1.5.1.3 | |
| vigor3900_firmware | le | 1.5.1.3 |
Related
cvelist
cvelist
CVE-2021-42911
2022-03-29 19:30:16
nvd
nvd
CVE-2021-42911
2022-03-29 20:15:07
cve
cve
CVE-2021-42911
2022-03-29 20:15:07