← Database

CVE-2024-46316

HIGH CVSS: 8.0 Published: 2024-10-09 Modified: 2026-06-17

Description

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message.

Affected Platforms

Draytek Vigor3900Draytek Vigor3900 Firmware

Weakness Type

CWE-78

References