High severity8.8NVD Advisory· Published Nov 1, 2024· Updated Jun 17, 2026
CVE-2024-51248
CVE-2024-51248
Description
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the modifyrow function.
Affected products
2Patches
Vulnerability mechanics
References
1- github.com/fu37kola/cve/blob/main/DrayTek/Vigor3900/1.5.1.3/DrayTek_Vigor_3900_1.5.1.3.pdfnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.