1454 matches found
DrayTek Vigor 3900 安全漏洞
The DrayTek Vigor 3900 is a high performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3, which can be exploited to inject commands into mainfunction.cgi and execute arbitrary code in the pingtrace function...
DrayTek Vigor 3900 安全漏洞
The DrayTek Vigor 3900 is a high performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3 that originates from the ability to inject commands into mainfunction.cgi and execute arbitrary code in the getrrd function...
PT-2024-34587 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pingtrace function. Recommendations: For Draytek Vigor3900 version...
DrayTek Vigor 3900 安全漏洞
The DrayTek Vigor 3900 is a high performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3, which can be exploited to inject commands into mainfunction.cgi and execute arbitrary code in the doSSLTunnel function...
DrayTek Vigor 3900 安全漏洞
The DrayTek Vigor 3900 is a high performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3 that originates from the ability to inject commands into mainfunction.cgi and execute arbitrary code in the doGRETunnel function...
CVE-2024-51298
DrayTek Vigor3900 firmware 1.5.1.3 exposes a command-injection in mainfunction.cgi via the doGRETunnel function, enabling arbitrary code execution over the network (CVE-2024-51298). Impact is high (remote, unauthenticated, total compromise) per CVSS 3.1 metrics. Mitigation/workaround from PT-2024...
CVE-2024-48074
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...
CVE-2024-48074
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...
PT-2024-7515 · Draytek · Draytek Vigor2960
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor2960 version 1.4.4 Description: An authorized remote code execution vulnerability exists due to the lack of neutralization of special elements used in the operating system command. This allows an attacker to execute arbitrary cod...
PT-2024-7997 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 version 1.5.1.3 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router'...
CVE-2024-48074
DrayTek Vigor2960 (v1.4.4) exposes an authorized RCE via the table parameter in the doPPPoE function (cgi-bin/mainfunction.cgi); an attacker can inject a command that is executed by the system function. Impact is high per CVSS metrics. Remediation/workaround from PT-2024-7515: temporarily disable...
DrayTek Vigor 2960 安全漏洞
The DrayTek Vigor 2960 is a dual WAN broadband router/VPN gateway from China DrayTek. A security vulnerability exists in the DrayTek Vigor 2960 version 1.4.4, which stems from an authorized remote code execution vulnerability that results in malicious commands that can be executed by system...
PT-2024-7995 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 version 1.5.1.3 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command in the restore function of the mainfunction.cgi file in the DrayTek Vigor 3900 router'...
PT-2024-7996 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 version 1.5.1.3 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command in the modifyrow function of the mainfunction.cgi file in the DrayTek Vigor 3900...
CVE-2024-48074
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...
PT-2024-7998 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the rename table function. This is due to the lack of measures to neutraliz...
CVE-2024-48074
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...
PT-2024-8828 · Draytek · Draytek Vigor3900
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 version 1.5.1.3 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the doPPPo function in the mainfunction.cgi script of the DrayTek Vigor 3900 router...