Command Injection Vulnerability in DrayTek Vigor3900
CVE-2024-45888
Currently unrated
What is CVE-2024-45888?
The DrayTek Vigor3900 running version 1.5.1.3 is susceptible to a command injection vulnerability. This occurs when an attacker manipulates the action parameter within the cgi-bin/mainfunction.cgi interface, specifically when invoking the set_ap_map_config function. Through this flaw, remote attackers may execute arbitrary commands on the affected device, potentially compromising network security and system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.