CVE-2024-45882

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletemapprofile...

CVE-2024-45882

The DrayTek Vigor3900 (version 1.5.1.3 ) is susceptible to a command injection vulnerability. This flaw is triggered when the action parameter within the cgi-bin/mainfunction.cgi component is set to delete_map_profile. An attacker can exploit this improper neutralization of special elements used ...