The vulnerability in the modifyrow function of the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the modifyrow function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the “restore” function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the “restore” function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the failure to address the elimination of certain special elements used in the operating system command. Exploiting this vulnerability allows a remote...

CVE-2024-45891

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletewlanprofile...

CVE-2024-45891

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletewlanprofile...

CVE-2024-45884

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setSWMGroup...

CVE-2024-45882

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletemapprofile...

CVE-2024-51253

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doL2TP function...

CVE-2024-51251

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...

CVE-2024-51249

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...

CVE-2024-51249

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...

CVE-2024-51251

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...

CVE-2024-51253

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doL2TP function...

CVE-2024-51251

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...

CVE-2024-51246

CVE-2024-51246 affects Draytek Vigor3900, specifically version 1.5.1.3. Attackers can inject commands into mainfunction.cgi and execute arbitrary commands via the doPPTP function, per multiple sources. The vulnerability is described across NVD/CVE records and connected feeds as an arbitrary comma...

CVE-2024-45893

DrayTek Vigor3900, firmware 1.5.1.3, contains a post-authentication command injection vulnerability in CGI path cgi-bin/mainfunction.cgi when the action parameter is set to setSWMOption. This affects the device as described in multiple sources (CVE-2024-45893, Red Hat, NVD, CVE databases) and sho...

CVE-2024-45884

DrayTek Vigor3900 firmware 1.5.1.3 is affected by a post-authentication command-injection vulnerability. The flaw occurs when the action parameter in /cgi-bin/mainfunction.cgi is set to setSWMGroup, allowing potentially arbitrary commands to be executed after authentication. CVSS v3.1: AV Adjacen...

PT-2024-31835 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue is a post-authentication command injection problem. It occurs when the action parameter in the "cgi-bin/mainfunction.cgi" endpoint is set to setSWMGroup. This allows for potential comma...

PT-2024-31840 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.3 Description: The issue is a post-authentication command injection problem. It occurs when the action parameter in the "cgi-bin/mainfunction.cgi" endpoint is set to delete wlan profile. Recommendations: For...

CVE-2024-51249

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...