Post-Authentication Command Injection in DrayTek Vigor3900
CVE-2024-45884

Currently unrated

Key Information:

Vendor
DrayTek
Status
Vigor3900
Vendor
CVE Published:
4 November 2024

Summary

The DrayTek Vigor3900 version 1.5.1.3 is susceptible to a post-authentication command injection vulnerability. This flaw arises when the 'action' parameter is manipulated within the 'cgi-bin/mainfunction.cgi' script using the 'setSWMGroup' action. Successful exploitation may allow an authenticated attacker to execute arbitrary commands on the device, potentially compromising its confidentiality, integrity, and availability.

References

https://github.com/N1nEmAn/wp/blob/main/test_v.zip
https://github.com/fu37kola/cve/blob/main/DrayTek/Vigor39...

Timeline

  • Vulnerability published

.