Unrated severityNVD Advisory· Published Mar 15, 2023· Updated Aug 2, 2024

CVE-2023-24229

Description

DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Draytek/Vigor2962cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.5.1.4

Patches

Vulnerability mechanics

References

web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vulmitre
www.draytek.co.uk/support/guides/kb-remotemanagementmitre
www.draytek.commitre
www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960mitre
www.draytek.com/support/knowledge-base/5465mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000