← Database

CVE-2024-51259

CRITICAL CVSS: 9.8 Published: 2024-10-31 Modified: 2026-06-17

Description

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the setup_cacertificate function.

Affected Platforms

Draytek Vigor3900Draytek Vigor3900 Firmware

Weakness Type

CWE-77

References