CVE-2020-8515

CVE-2020-8515 affects DrayTek Vigor2960, Vigor3900 and Vigor300B devices (various Beta firmware versions) via the cgi-bin/mainfunction.cgi endpoint. The root cause is unsafely processed shell metacharacters in POST requests, enabling remote code execution with root privileges without authenticati...

CVE-2020-15415

DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 are affected by CVE-2020-15415. The issue is an OS command injection in /cgi-bin/mainfunction.cgi/cvmcfgupload that allows remote code execution via shell metacharacters in a filename when the request uses content type text/x-python...

CVE-2020-10828

CVE-2020-10828 is a stack-based buffer overflow in the cvmd process on DrayTek Vigor3900, Vigor2960, and Vigor300B devices. Versions prior to 1.5.1 are affected and allow remote code execution via a crafted remote HTTP request. This is confirmed by multiple sources in connected documents (vendor ...

CVE-2020-10826

CVE-2020-10826 affects DrayTek Vigor3900, Vigor2960, and Vigor300B before version 1.5.1. The issue allows remote command injection via a crafted HTTP request to /cgi-bin/activate.cgi when DEBUG mode is enabled, enabling an attacker to execute arbitrary commands on affected devices. The root cause...

CVE-2020-10827

CVE-2020-10827 refers to a stack-based buffer overflow in the apmd service on Draytek Vigor3900, Vigor2960, and Vigor300B devices. The vulnerability, present in firmware prior to 1.5.1, allows remote code execution via a crafted HTTP request. Multiple connected sources corroborate the affected mo...

CVE-2020-14472

CVE-2020-14472 affects DrayTek Vigor3900, Vigor2960, and Vigor300B devices prior to version 1.5.1.1. The issue is in the mainfunction.cgi component and enables command injection. This could lead to remote code execution on affected devices, as noted in the advisory context. No exploitation status...

CVE-2021-43118

CVE-2021-43118 affects DrayTek Vigor 2960, 3900, and 300B (firmware 1.5.1.3). A remote command injection arises from inadequate validation in mainfunction.cgi when handling crafted HTTP queries with a malformed QUERY STRING, enabling arbitrary code execution by a remote attacker over the network....

CVE-2024-43027

Affected products: DrayTek Vigor 3900, 2960, and 300B with versions prior to 1.5.1.5_Beta. Vulnerability: command injection via the action parameter in cgi-bin/mainfunction.cgi, as reported by multiple sources. Root cause: input in the action parameter allows execution of arbitrary commands on th...

CVE-2024-45890

CVE-2024-45890 affects DrayTek Vigor3900 (version 1.5.1.3). The vulnerability is a post-authentication command injection caused by lack of neutralization of certain characters in the action parameter to cgi-bin/mainfunction.cgi when action equals download_ovpn. Impact is high (remote command exec...

CVE-2024-51252

Summary (CVE-2024-51252): DrayTek Vigor3900 (firmware 1.5.1.3) is affected. The issue stems from lack of input neutralization in the restore function within mainfunction.cgi, enabling an attacker to inject malicious commands and execute arbitrary code remotely. Documented details indicate the vul...

CVE-2021-42911

CVE-2021-42911 is a Format String vulnerability in DrayTek Vigor routers (models 2960, 3900, 300B) ≤ 1.5.1.3, exploitable via crafted HTTP messages with malformed QUERY STRING in the mainfunction.cgi. The CNVD/NVD entries describe remote code execution risk with network access and low attack comp...

CVE-2024-51254

DrayTek Vigor3900 firmware 1.5.1.3 is affected by a command-injection vulnerability in the mainfunction.cgi via the sign_cacertificate function. The issue allows an attacker to inject and execute arbitrary commands on affected devices. Multiple sources (NVD, Red Hat, CVE lists, and PT Security) c...

CVE-2024-51260

CVE-2024-51260 affects DrayTek Vigor3900, specifically version 1.5.1.3, where an attacker can inject commands into mainfunction.cgi and execute arbitrary commands via the acme_process function. The vulnerability enables remote code execution with network attack Vector, high impact on confidential...

CVE-2024-48153

DrayTek Vigor3900 firmware 1.5.1.3 contains a command-injection vulnerability in mainfunction.cgi via the get_subconfig function, enabling an attacker to execute arbitrary commands with network access. Impact per CVSS shows high confidentiality, integrity, and availability implications (CVSS‑3.1:...

CVE-2024-51255

CVE-2024-51255 affects DrayTek Vigor3900 firmware 1.5.1.3. The vulnerability allows an attacker to inject arbitrary commands into the web interface by invoking the ruequest_certificate function within mainfunction.cgi, with a CVSS v3.1 score of 9.8 (Network, Critical, no user interaction, high im...

CVE-2024-45888

Vulnerability detail (CVE-2024-45888) : A command-injection flaw affects DrayTek Vigor3900 running version 1.5.1.3 . The issue arises when the parameter action in the endpoint cgi-bin/mainfunction.cgi is set to set_ap_map_config (as noted in the related PT-2024-31837 description). This can enable...

CVE-2024-51259

CVE-2024-51259 affects DrayTek Vigor3900, version 1.5.1.3. The issue is a command-injection flaw in the CGI endpoint, allowing an attacker to inject commands into the mainfunction.cgi via the setup_cacertificate function, enabling arbitrary commands execution. The vulnerability carries a high imp...

CVE-2024-51298

DrayTek Vigor3900 firmware 1.5.1.3 exposes a command-injection in mainfunction.cgi via the doGRETunnel function, enabling arbitrary code execution over the network (CVE-2024-51298). Impact is high (remote, unauthenticated, total compromise) per CVSS 3.1 metrics. Mitigation/workaround from PT-2024...

CVE-2024-51257

Vulnerable product: DrayTek Vigor3900 firmware 1.5.1.3. Issue: mainfunction.cgi accepts input via doCertificate, enabling attackers to inject commands and achieve arbitrary command execution. Root cause: insecure handling in the doCertificate path leading to remote code execution. Impact: high-se...

CVE-2020-10825

CVE-2020-10825 affects DrayTek Vigor3900, Vigor2960, and Vigor300B prior to firmware version 1.5.1. The issue is a stack-based buffer overflow in the /cgi-bin/activate.cgi endpoint during base64 decoding of the ticket parameter, which can enable remote code execution via a remote HTTP request. Th...

CVE-2024-45884

DrayTek Vigor3900 firmware 1.5.1.3 is affected by a post-authentication command-injection vulnerability. The flaw occurs when the action parameter in /cgi-bin/mainfunction.cgi is set to setSWMGroup, allowing potentially arbitrary commands to be executed after authentication. CVSS v3.1: AV Adjacen...

CVE-2024-51247

Affects DrayTek Vigor3900 firmware, version 1.5.1.3. The vulnerability arises from lack of neutralization of special elements in the operating system command used by the doPPPo function in the mainfunction.cgi script, enabling a remote attacker to inject and execute arbitrary commands. Documented...

CVE-2020-10823

CVE-2020-10823 affects DrayTek Vigor3900, Vigor2960, and Vigor300B devices running versions prior to 1.5.1. A stack-based buffer overflow exists in the /cgi-bin/activate.cgi endpoint through the var parameter, allowing remote attackers to achieve code execution via a remote HTTP request (issue 1 ...

CVE-2020-10824

Affected devices: DrayTek Vigor3900, Vigor2960, and Vigor300B. Vulnerable version range: prior to 1.5.1. Vulnerability type & impact: stack-based buffer overflow in the "/cgi-bin/activate.cgi" API endpoint via the ticket parameter that allows remote attackers to achieve code execution through a r...

CVE-2024-44844

CVE-2024-44844 affects DrayTek Vigor3900 v1.5.1.6. An authenticated command injection vulnerability exists in the run_command function through the name parameter, enabling arbitrary commands with low privileges required and no user interaction. Impact is high on confidentiality, integrity, and av...

CVE-2024-45891

DrayTek Vigor3900 1.5.1.3 is affected by a post-authentication command injection in cgi-bin/mainfunction.cgi when action=delete_wlan_profile is used. The vulnerability allows arbitrary commands with low privileges after authentication, impacting confidentiality, integrity, and availability (CVSS ...

CVE-2024-46316

DrayTek Vigor3900, firmware 1.5.1.6, contains a command-injection vulnerability in the sub_2C920 function exposed via /cgi-bin/mainfunction.cgi. An attacker can supply a crafted HTTP message to execute arbitrary commands with low privileges and no user interaction, potentially impacting confident...

CVE-2020-14473

CVE-2020-14473 is a stack-based buffer overflow affecting DrayTek Vigor3900, Vigor2960, and Vigor300B devices with firmware prior to 1.5.1.1. The connected sources consistently identify the issue as a stack overflow in the affected devices, enabling potential arbitrary code execution and impact t...

CVE-2024-45885

DrayTek Vigor3900 firmware 1.5.1.3 contains a post-authentication command injection vulnerability triggered by the action parameter in cgi-bin/mainfunction.cgi when set to autodiscovery_clear. The issue is documented across multiple sources (NVD, Red Hat, CIRCL, CNNVD, CVE listings). The vulnerab...

CVE-2024-45893

DrayTek Vigor3900, firmware 1.5.1.3, contains a post-authentication command injection vulnerability in CGI path cgi-bin/mainfunction.cgi when the action parameter is set to setSWMOption. This affects the device as described in multiple sources (CVE-2024-45893, Red Hat, NVD, CVE databases) and sho...

CVE-2024-51249

Draytek Vigor3900 firmware 1.5.1.3 fix/mitigation details: Affects mainfunction.cgi where input is not sufficiently validated, enabling attackers to injection execute arbitrary commands via reboot function. Impact: remote command execution with HIGH confidentiality/integrity/availability impact w...

CVE-2024-51244

CVE-2024-51244 affects DrayTek Vigor3900 (firmware 1.5.1.3). The vulnerability stems from lack of input neutralization in mainfunction.cgi’s doIPSec path, allowing remote attackers to inject commands and execute arbitrary code. Documented impact is arbitrary command execution with the associated ...

CVE-2024-45882

CVE-2024-45882 affects DrayTek Vigor3900, version 1.5.1.3. The issue is a command injection vulnerability that occurs when the action parameter in cgi-bin/mainfunction.cgi is set to delete_map_profile . The connected documents confirm the same description across multiple sources (Red Hat, NVD, CV...

CVE-2024-51248

The CVE-2024-51248 entry affects DrayTek Vigor3900 firmware (version 1.5.1.3). The root cause is lack of proper neutralization in the modifyrow function within mainfunction.cgi, enabling an attacker to inject commands and execute arbitrary code. Exploitation details are described across multiple ...

CVE-2024-51296

CVE-2024-51296 affects DrayTek Vigor3900, version 1.5.1.3. The vulnerability stems from the ability to inject malicious commands into the web endpoint mainfunction.cgi and execute arbitrary commands by invoking the pingtrace function. The described impact is arbitrary command execution with high ...

CVE-2024-45887

DrayTek Vigor3900 firmware 1.5.1.3 contains a post-authentication command injection in cgi-bin/mainfunction.cgi when action is set to doOpenVPN, enabling arbitrary command execution after login. Impact is described as high (complete compromise of confidentiality, integrity, and availability). Mit...

CVE-2024-51245

CVE-2024-51245 affects DrayTek Vigor3900 1.5.1.3. Attackers can inject commands into the web-facing mainfunction.cgi and execute arbitrary code by invoking the rename_table function due to insufficient input validation. Public sources describe remote command execution as the outcome. Reported rem...

CVE-2024-51258

CVE-2024-51258 affects DrayTek Vigor3900 firmware version 1.5.1.3 . Vulnerability arises in the internal web endpoint mainfunction.cgi via the function doSSLTunnel , allowing an attacker to inject and execute arbitrary commands. The CVE's CVSS v3.1 metrics indicate a network-facilitated, low-priv...

CVE-2024-51251

Summary: CVE-2024-51251 affects DrayTek Vigor3900 firmware 1.5.1.3. The vulnerability allows an attacker to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function. Affected product: DrayTek Vigor3900 (firmware 1.5.1.3). Root cause / vector: W...

CVE-2020-14993

CVE-2020-14993 affects DrayTek Vigor2960, Vigor3900, and Vigor300B devices with firmware before 1.5.1.1. The vulnerability is a stack-based buffer overflow in the formuserphonenumber parameter of an authusersms action to mainfunction.cgi, enabling remote code execution. Public exploit status is n...

CVE-2024-45889

DrayTek Vigor3900 firmware 1.5.1.3 is affected by a post-authentication command injection vulnerability. The vulnerability occurs when the parameter action in the endpoint cgi-bin/mainfunction.cgi is set to commandTable, enabling arbitrary command execution after login. CVSS details indicate high...

CVE-2024-51301

DrayTek Vigor3900 (firmware 1.5.1.3) is affected by CVE-2024-51301. The issue allows an attacker to inject commands into mainfunction.cgi and execute arbitrary commands via the packet_monitor function, constituting remote code execution over the network. The vulnerability affects the mainfunction...

CVE-2024-51246

CVE-2024-51246 affects Draytek Vigor3900, specifically version 1.5.1.3. Attackers can inject commands into mainfunction.cgi and execute arbitrary commands via the doPPTP function, per multiple sources. The vulnerability is described across NVD/CVE records and connected feeds as an arbitrary comma...

CVE-2024-51299

CVE-2024-51299 affects Draytek Vigor3900, version 1.5.1.3. The flaw allows an attacker to inject commands into mainfunction.cgi and execute arbitrary commands via the dumpSyslog function. Documented impact is high (remote network attack with full system compromise) with CVSS v3.1: AV:N/AC:L/PR:L/...

CVE-2024-51304

CVE-2024-51304 affects Draytek Vigor3900, version 1.5.1.3. The vulnerability arises in the web interface script mainfunction.cgi, where input handling around ldap_search_dn allows an attacker to inject and execute arbitrary commands. CVSS v3.1 base score 8.8 (Network, Low attack complexity, Privi...

CVE-2024-51253

CVE-2024-51253 affects DrayTek Vigor3900 v1.5.1.3. Attackers can inject commands into the vulnerable script mainfunction.cgi and execute arbitrary commands by calling the doL2TP function, enabling command execution with low privileges and adjacent access. The available sources describe the impact...

CVE-2024-51300

CVE-2024-51300 affects Draytek Vigor3900, firmware version 1.5.1.3. Multiple sources confirm an authentication-agnostic command-injection in the web-facing CGI endpoint: attackers can inject commands into mainfunction.cgi and trigger execution of arbitrary commands by invoking the get_rrd functio...

CVE-2024-44845

DrayTek Vigor3900 firmware v1.5.1.6 contains an authenticated command injection via the value parameter in the filter_string function. An attacker with valid credentials can inject commands, impacting confidentiality, integrity, and availability (CVSS v3.1 base: High). The connected documents pro...