High severity8.8NVD Advisory· Published Nov 1, 2024· Updated Jun 17, 2026
CVE-2024-51245
CVE-2024-51245
Description
In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the rename_table function.
Affected products
3- cpe:2.3:o:draytek:vigor3900_firmware:1.5.1.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/fu37kola/cve/blob/main/DrayTek/Vigor3900/1.5.1.3/DrayTek_Vigor_3900_1.5.1.3.pdfnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.