Command Injection Vulnerabilities in Draytek Vigor Devices

CVE-2020-14472

Summary

Draytek's Vigor3900, Vigor2960, and Vigor 300B devices are susceptible to command injection flaws found in the mainfunction.cgi file. These vulnerabilities could allow an attacker to execute arbitrary commands on the affected devices, potentially compromising their security and functionality. It is crucial for users of these devices to apply the necessary updates to mitigate any risks associated with this vulnerability.

References