← Database

CVE-2024-51244

HIGH CVSS: 8.8 Published: 2024-11-01 Modified: 2026-06-17

Description

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doIPSec function.

Affected Platforms

Draytek Vigor3900Draytek Vigor3900 Firmware

Weakness Type

CWE-78, CWE-78

References