PT-2024-31954 · Draytek · Draytek Vigor3900

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3900 version 1.5.1.6 Description: The issue is a command injection vulnerability that allows attackers to execute arbitrary commands via supplying a crafted HTTP message. This is achieved through the sub 2C920 function at the...