312 matches found
VulnCheck KEV: CVE-2021-42911
A Format String vulnerability exists in DrayTek Vigor 2960 = 1.5.1.3, DrayTek Vigor 3900 = 1.5.1.3, and DrayTek Vigor 300B = 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code...
9.8CVSS9.2AI score0.03524EPSS
SaveIn wildExploits1References2
20