CVE-2024-46316

The DrayTek Vigor3900 router, specifically version v1.5.1.6 , is susceptible to a command injection vulnerability. The flaw exists within the sub_2C920 function located at the /cgi-bin/mainfunction.cgi API endpoint. An unauthenticated attacker can exploit this by supplying a crafted HTTP message ...

CVE-2024-46316: Improper Neutralization of Special Elements used in an OS Command

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message...

CVE-2024-46316

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message...