CVE-2024-45893

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setSWMOption...

CVE-2024-45893: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setSWMOption...

CVE-2024-45888: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setapmapconfig.'...

CVE-2024-45887: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to doOpenVPN...

CVE-2024-45884: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setSWMGroup...

CVE-2024-45882: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletemapprofile...

CVE-2024-51253: Improper Neutralization of Special Elements used in an OS Command

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doL2TP function...

CVE-2024-51251: Improper Neutralization of Special Elements used in an OS Command

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...

CVE-2024-51246: Improper Neutralization of Special Elements used in an OS Command

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function...

CVE-2024-51251

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...

CVE-2024-51249: Improper Neutralization of Special Elements used in an OS Command

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...

PT-2024-34575

Name of the Vulnerable Software and Affected Versions Draytek Vigor3900 version 1.5.1.3 Description The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function. This enables attackers to potentially gain unauthorized...

CVE-2024-45887

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to doOpenVPN...

CVE-2024-51251

The DrayTek Vigor3900 router (version 1.5.1.3 ) is vulnerable to an Improper Neutralization of Special Elements used in an OS Command vulnerability. An attacker can inject malicious commands into mainfunction.cgi and achieve arbitrary command execution by triggering the backup function . No speci...

CVE-2024-45890

The DrayTek Vigor3900 (v1.5.1.3) , Vigor 2960 , and Vigor 300B routers are susceptible to a post-authentication command injection vulnerability. The flaw exists within the set_ap_map_config() function of the cgi-bin/mainfunction.cgi script. It is caused by a failure to neutralize

DrayTek Vigor 3900 security vulnerabilities

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to inject malicious commands into mainfunction.cgi and execute arbitrary commands by...

DrayTek Vigor 3900 security vulnerabilities

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. The vulnerability can be exploited to execute arbitrary commands by injecting malicious commands into mainfunction.cgi and calling...

PT-2024-34572 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into "mainfunction.cgi" and execute arbitrary commands by calling the doPPTP function. Recommendations: For Draytek Vigor3900 version...

PT-2024-34573 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 version 1.5.1.3 Description: The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function. This enables remote reboot and potentially other...

PT-2024-31840 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue is a post-authentication command injection problem. It occurs when the action parameter in the "cgi-bin/mainfunction.cgi" endpoint is set to delete wlan profile. Recommendations: For...