The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the failure to address the elimination of certain special elements used in the operating system command. Exploiting this vulnerability allows a remote...