Description
DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.
Related CPE's
Vulnerable
Vulnerable
Vulnerable
Weaknesses
134c704f-9b21-4f2e-91b3-4a467353bcc0
Secondary
CWE-77
CVSS impact metrics
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 · High
Information
Source identifier
Vulnerability status
Analyzed
Published
2024-08-21T14:15:08.297Z
1 year agoLast modified
2025-06-03T12:09:46.200Z
9 months ago