← Database

CVE-2024-44844

HIGH CVSS: 8.8 Published: 2024-09-06 Modified: 2026-06-17

Description

DrayTek Vigor3900 v1.5.1.6 was discovered to contain an authenticated command injection vulnerability via the name parameter in the run_command function.

Affected Platforms

Draytek Vigor3900Draytek Vigor3900 Firmware

Weakness Type

CWE-78, CWE-77

References