CVE-2024-43027: Command Injection
DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43027?
The severity of CVE-2024-43027 is classified as medium risk due to its command injection capability.
How do I fix CVE-2024-43027?
To fix CVE-2024-43027, upgrade your DrayTek Vigor 3900, Vigor 2960, or Vigor 300B to version 1.5.1.5_Beta or later.
What devices are affected by CVE-2024-43027?
CVE-2024-43027 affects the DrayTek Vigor 3900, Vigor 2960, and Vigor 300B routers running versions prior to 1.5.1.5_Beta.
What type of vulnerability is CVE-2024-43027?
CVE-2024-43027 is a command injection vulnerability that can be exploited through the action parameter in cgi-bin/mainfunction.cgi.
Is there a workaround for CVE-2024-43027?
Currently, the recommended workaround for CVE-2024-43027 is to upgrade the affected devices to the latest firmware.