CVE-2024-45882: Command Injection
Published Nov 4, 2024
·Updated
DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletemapprofile.
Affected Software
1 affected component
DrayTek Vigor3900
Event History
Nov 4, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-45882?
CVE-2024-45882 is classified as a high severity vulnerability due to its command injection capabilities.
2
How do I fix CVE-2024-45882?
To fix CVE-2024-45882, update the DrayTek Vigor3900 to the latest firmware version that addresses this vulnerability.
3
What is the impact of CVE-2024-45882?
The impact of CVE-2024-45882 includes potential unauthorized command execution through the affected parameter in the router.
4
Is CVE-2024-45882 remote exploitable?
Yes, CVE-2024-45882 is remote exploitable, allowing attackers to execute commands without physical access.
5
What versions of DrayTek Vigor3900 are affected by CVE-2024-45882?
CVE-2024-45882 affects DrayTek Vigor3900 running firmware version 1.5.1.3.