CVE-2024-51301

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packetmonitor function...

CVE-2024-51301

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packetmonitor function...

CVE-2024-51301: Improper Neutralization of Special Elements used in a Command

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packetmonitor function...

CVE-2024-51301

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packetmonitor function...

DrayTek Vigor 3900 security vulnerabilities

The DrayTek Vigor 3900 is a high performance router for enterprise networks from DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3, which can be exploited to inject commands into mainfunction.cgi and execute arbitrary code in the packetmonitor function...

CVE-2024-51301

The DrayTek Vigor3900 router, specifically version 1.5.1.3 , is vulnerable to a command injection flaw (CWE-77). Attackers can inject malicious commands into the mainfunction.cgi endpoint and execute arbitrary commands by invoking the packet_monitor function. The impact is categorized as HIGH sev...