CVE-2024-51258: Command Injection
Published Oct 30, 2024
·Updated
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doSSLTunnel function.
Affected Software
1 affected component
DrayTek Vigor3900
Event History
Oct 30, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51258?
The severity of CVE-2024-51258 is classified as critical due to the potential for remote command execution.
2
How do I fix CVE-2024-51258?
To fix CVE-2024-51258, apply the latest firmware update for DrayTek Vigor3900 that addresses this vulnerability.
3
What are the potential impacts of CVE-2024-51258?
CVE-2024-51258 allows attackers to execute arbitrary commands on the device, potentially compromising system integrity.
4
Who is affected by CVE-2024-51258?
CVE-2024-51258 affects users of DrayTek Vigor3900 running firmware version 1.5.1.3.
5
Is there a workaround for CVE-2024-51258?
As a workaround for CVE-2024-51258, limit external access to the device's administrative interface.