CVE-2024-51257

Vulnerable product: DrayTek Vigor3900 firmware 1.5.1.3. Issue: mainfunction.cgi accepts input via doCertificate, enabling attackers to inject commands and achieve arbitrary command execution. Root cause: insecure handling in the doCertificate path leading to remote code execution. Impact: high-se...