Draytek Vigor Command Injection (CVE-2021-43118)

A command injection vulnerability exists in Draytek Vigor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-43118

creationtimestamp| type| source ---|---|--- 2022-03-30 00:11:33+00:00| seen| https://t.me/cibsecurity/39777...

CVE-2021-43118

A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing malformed QUERY STRING in mainfunction.cgi, which could let a remote malicious user execute arbitrary code...

CVE-2021-43118

CVE-2021-43118 affects DrayTek Vigor 2960, 3900, and 300B (firmware 1.5.1.3). A remote command injection arises from inadequate validation in mainfunction.cgi when handling crafted HTTP queries with a malformed QUERY STRING, enabling arbitrary code execution by a remote attacker over the network....