CVE-2024-48074

An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...

CVE-2024-48074

The DrayTek Vigor2960 router (version 1.4.4 ) is vulnerable to Remote Code Execution (RCE) due to the improper neutralization of special elements used in operating system commands. An attacker can inject a specially crafted command into the table parameter of the doPPPoE function located in the c...