CVE-2024-46316

The DrayTek Vigor3900 router, specifically version v1.5.1.6 , contains a command injection vulnerability. The flaw exists within the sub_2C920 function located at the /cgi-bin/mainfunction.cgi API endpoint. An attacker can exploit this by supplying a crafted HTTP message to execute arbitrary comm...