CVE-2024-51254

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the signcacertificate function...

CVE-2024-51254

DrayTek Vigor3900 firmware 1.5.1.3 is affected by a command-injection vulnerability in the mainfunction.cgi via the sign_cacertificate function. The issue allows an attacker to inject and execute arbitrary commands on affected devices. Multiple sources (NVD, Red Hat, CVE lists, and PT Security) c...