CVE-2024-51254

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the signcacertificate function...

CVE-2024-51254

The DrayTek Vigor3900 router (version 1.5.1.3 ) is susceptible to a command injection vulnerability. Attackers can inject malicious commands into mainfunction.cgi and achieve arbitrary command execution by calling the sign_cacertificate function. This vulnerability is categorized as Improper Neut...