CVE-2023-24229: Command Injection
DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Other sources
DrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the mainfunction.cgi component.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the DrayTek Vigor2960 command injection vulnerability?
The vulnerability ID for the DrayTek Vigor2960 command injection vulnerability is CVE-2023-24229.
How severe is the DrayTek Vigor2960 command injection vulnerability?
The severity of the DrayTek Vigor2960 command injection vulnerability is high, with a CVSS score of 7.8.
What is affected by the DrayTek Vigor2960 command injection vulnerability?
The DrayTek Vigor2960 firmware version 1.5.1.4 is affected by the command injection vulnerability.
How can I fix the DrayTek Vigor2960 command injection vulnerability?
To fix the DrayTek Vigor2960 command injection vulnerability, update the firmware to a version that has addressed the issue.
Where can I find more information about the DrayTek Vigor2960 command injection vulnerability?
You can find more information about the DrayTek Vigor2960 command injection vulnerability on the GitHub page and the official DrayTek website.