← Database

CVE-2024-45882

HIGH CVSS: 8.0 Published: 2024-11-04 Modified: 2026-06-17

Description

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_map_profile.`

Affected Platforms

Draytek Vigor3900Draytek Vigor3900 Firmware

Weakness Type

CWE-78

References