CVE-2024-45885

The DrayTek Vigor3900 router, specifically version 1.5.1.3 , is susceptible to a post-authentication command injection vulnerability. The flaw exists in the cgi-bin/mainfunction.cgi component, triggered when the action parameter is set to autodiscovery_clear. An attacker with valid authentication...

CVE-2024-45885: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to autodiscoveryclear...

CVE-2024-45885

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to autodiscoveryclear...