CVE-2024-51304

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldapsearchdn function...

CVE-2024-51304

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldapsearchdn function...

CVE-2024-51304

CVE-2024-51304 affects Draytek Vigor3900, version 1.5.1.3. The vulnerability arises in the web interface script mainfunction.cgi, where input handling around ldap_search_dn allows an attacker to inject and execute arbitrary commands. CVSS v3.1 base score 8.8 (Network, Low attack complexity, Privi...