CVE-2024-51246

The DrayTek Vigor3900 router, specifically version 1.5.1.3 , is vulnerable to a command injection flaw. Attackers can inject malicious commands into the mainfunction.cgi endpoint and execute arbitrary commands by invoking the doPPTP function. Practical consequences include unauthorized command ex...

CVE-2024-51246

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function...

CVE-2024-51246

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function...