Remote Command Injection Flaw in DrayTek Vigor Series Routers

CVE-2021-43118

Summary

A vulnerability has been identified within specific models of DrayTek Vigor routers that allows unauthorized remote command execution. By sending a specially crafted HTTP request containing a malformed query string to the affected devices, an attacker could exploit this flaw to execute arbitrary commands on the router. This type of vulnerability poses significant risks to network integrity and confidentiality, potentially leading to unauthorized access and data breaches.

References