CVE-2024-51252

creationtimestamp| type| source ---|---|--- 2024-11-01 19:32:17+00:00| seen| https://t.me/cvedetector/9630 2026-06-22 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3motxho22u42m...

CVE-2024-51252

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the restore function...

CVE-2024-51252

Summary (CVE-2024-51252): DrayTek Vigor3900 (firmware 1.5.1.3) is affected. The issue stems from lack of input neutralization in the restore function within mainfunction.cgi, enabling an attacker to inject malicious commands and execute arbitrary code remotely. Documented details indicate the vul...

CVE-2024-51252

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the restore function...