3 matches found
CVE-2024-44845
DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the value parameter in the filterstring function...
8.8CVSS0.01956EPSS
SaveExploits1References1
CVE-2024-44845
DrayTek Vigor3900 firmware v1.5.1.6 contains an authenticated command injection via the value parameter in the filter_string function. An attacker with valid credentials can inject commands, impacting confidentiality, integrity, and availability (CVSS v3.1 base: High). The connected documents pro...
8.8CVSS7.8AI score0.01956EPSS
SaveExploits1References1Affected Software1
20