Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-44844
HistorySep 06, 2024 - 12:00 a.m.

CVE-2024-44844

2024-09-0600:00:00
mitre
github.com
draytek vigor3900
authenticated
command injection
vulnerability
run_command function

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

28.1%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "draytek",
    "product": "vigor3900_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.1.6"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

28.1%

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2024-44844