CVE-2023-24229

The DrayTek Vigor2960 (version 1.5.1.4 ) contains a command injection vulnerability in the mainfunction.cgi component. An authenticated attacker with network access to the web management interface can inject and execute arbitrary operating system commands by exploiting the 'parameter' parameter d...

CVE-2023-24229

DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...