CVE-2024-46316

The DrayTek Vigor3900 router, specifically version v1.5.1.6 , is susceptible to a command injection vulnerability. The flaw exists within the sub_2C920 function located at the /cgi-bin/mainfunction.cgi API endpoint. An unauthenticated attacker can exploit this by supplying a crafted HTTP message ...