CVE-2024-51259: Command Injection
Published Oct 31, 2024
·Updated
DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the setupcacertificate function.
Affected Software
1 affected component
DrayTek Vigor3900
Event History
Oct 31, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-51259?
CVE-2024-51259 is considered a high severity vulnerability due to its ability to allow arbitrary command execution.
2
How can I protect against CVE-2024-51259?
To protect against CVE-2024-51259, ensure that your DrayTek Vigor3900 router is updated to the latest firmware version.
3
What does CVE-2024-51259 affect?
CVE-2024-51259 specifically affects DrayTek Vigor3900 routers running firmware version 1.5.1.3.
4
What type of attack does CVE-2024-51259 facilitate?
CVE-2024-51259 facilitates command injection attacks through the mainfunction.cgi interface.
5
How do I check if my device is vulnerable to CVE-2024-51259?
You can check if your device is vulnerable to CVE-2024-51259 by verifying if it is running DrayTek Vigor3900 firmware version 1.5.1.3.